The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
☆14Feb 10, 2022Updated 4 years ago
Alternatives and similar repositories for attack-surface-detector
Users that are interested in attack-surface-detector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.☆26Mar 11, 2024Updated 2 years ago
- This extension provides a way to discover NoSQL injection vulnerabilities.☆11Feb 1, 2021Updated 5 years ago
- Interrogate your GitHub resources with the help of the world's greatest detectives: Powerpipe + Steampipe + Sherlock.☆42Mar 25, 2026Updated 6 months ago
- Easily write tests and fuzz many different programs.☆12Dec 13, 2022Updated 3 years ago
- ☆13Apr 15, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Inject code into .net applications☆14Nov 7, 2018Updated 7 years ago
- shellcode obfuscater and runner in golang☆11Aug 13, 2023Updated 3 years ago
- This contains the contents needed to deploy a home lab in VirtualBox.☆18Jul 6, 2020Updated 6 years ago
- (Unofficial) Ruby wrapper for the Bugcrowd HTTP API☆14Feb 27, 2017Updated 9 years ago
- a simple powershell wrapper to automate checking a user's access around the network☆14Dec 5, 2023Updated 2 years ago
- Terraform to run Scoutsuite security scan of projects within a Google Cloud Org. Report will be published to a GCS bucket.☆17Jan 5, 2026Updated 9 months ago
- Download all the HIBP passwords☆12Apr 6, 2023Updated 3 years ago
- 🐧 A simple kernel-level rootkit☆21Mar 1, 2016Updated 10 years ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Sep 10, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Patch for the emulation of Octeon MIPS64 in QEMU☆15Feb 2, 2018Updated 8 years ago
- 12-week Geekwise course on web application security and hardening.☆17Mar 19, 2020Updated 6 years ago
- Designed for automated enumeration for ethical hacking and penetration testing☆11Jan 17, 2018Updated 8 years ago
- S3 Buckets that will let you list all files inside them☆14Apr 26, 2018Updated 8 years ago
- IDA Pro Python plugin to analyze and annotate Linux kernel alternatives☆23Dec 15, 2021Updated 4 years ago
- PowerShell script to perform a REST API query to get IP address geo-location information☆15Oct 21, 2018Updated 7 years ago
- Ed is a tool used to identify and exploit accessible UNIX Domain Sockets☆30Mar 11, 2019Updated 7 years ago
- A plugin that provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other p…☆26Aug 22, 2017Updated 9 years ago
- DRAKVUF Black-box Binary Analysis☆16Feb 26, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- An Erlang library wrapping AES-GCM (AEAD) crypto in a Fernet-like interface☆29Jan 22, 2021Updated 5 years ago
- Repository of Volatility3 plugins☆23Mar 22, 2023Updated 3 years ago
- Wmap ("Web Mapper") Information gathering for web hacking.☆15Dec 3, 2014Updated 11 years ago
- Simple SSH server that serves anonymous git repositories (read-only)☆11Oct 18, 2018Updated 7 years ago
- OAuth 2.0 exploitation, attack and research tools.☆13Jan 20, 2024Updated 2 years ago
- Report and finding templates used by the Serpico reporting tool☆16Sep 26, 2018Updated 8 years ago
- Documentation and Support for AttackForge ReportGen☆22Jul 26, 2025Updated last year
- Web弱密码爆破工具, 驱动浏览器进行弱密码爆破, 支持所有Web系统. 协程练手项目☆42Nov 14, 2022Updated 3 years ago
- A brief list of all the red teaming scenarios that can be easily used to validate your current company infrastructure. Scenarios are comp…☆18Jul 26, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This script helps forward all calls to wsl's 1Password CLI over to windows to enable Biometric authentication to function☆19Aug 16, 2025Updated last year
- Simple python wrapper for the Robtex API (see https://www.robtex.com/api/).☆13Apr 17, 2021Updated 5 years ago
- chut is a simple command line executable to mute, decrease/increase system volume (Mac OS X)☆16Jun 29, 2022Updated 4 years ago
- ☆16Apr 16, 2015Updated 11 years ago
- logstash demo using docker☆18Jul 15, 2013Updated 13 years ago
- This repo gives an overview of some GCP metadata API attack and defend patterns☆79Mar 23, 2020Updated 6 years ago
- Writeup of CVE-2017-1002101 with sample "exploit"/escape☆34Mar 23, 2018Updated 8 years ago