ZFPSystems / zaproxy-automation
This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites
☆23Updated last year
Related projects: ⓘ
- Validate proxies for specific domain☆34Updated 3 years ago
- Postman Integration is an extension for burp to generate Postman collection fomat json file.☆19Updated 2 years ago
- Write-Ups for TryHackMe☆21Updated 3 years ago
- multiple password 'asher using Python’s hashlib☆15Updated 3 years ago
- ☆10Updated 3 years ago
- Information-Gathering Shell Script☆28Updated 3 years ago
- Fork of https://github.com/PortSwigger/param-miner for header smuggling research☆12Updated 2 years ago
- ☆13Updated 11 months ago
- CRLFMap is a tool to find HTTP Splitting vulnerabilities☆25Updated 4 years ago
- Automate the scanning and enumeration of machines externally while maintaining complete control over scans shot to the targets with the s…☆17Updated 2 years ago
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆12Updated 3 years ago
- Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.☆56Updated 4 years ago
- Interactsh deployment to AWS EC2 Instance with Terraform☆11Updated 2 years ago
- Dockerfile with advanced configurations for Offensive Docker.☆11Updated 4 years ago
- Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of …☆13Updated 5 months ago
- ☆28Updated this week
- Extract endpoints from specific Git repository for fuzzing☆21Updated 3 years ago
- A collection of python apps and shell scripts to email an xlsx spreadsheet of new vulnerabilities in the NIST CVE database and their asso…☆12Updated 3 years ago
- Jumpstart multiple WebSocket servers quickly☆25Updated 2 years ago
- A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.☆22Updated 6 months ago
- A Go scraper that validates security.txt files and outputs them in the disclose.io JSON format.☆20Updated 3 years ago
- Kubernetes Scanner☆41Updated 2 years ago
- Take domains on stdin and output them on stdout if they get resolved☆33Updated 2 years ago
- WebSocket Connection Smuggler☆45Updated last year
- Objectify-s3 is a tool that recursively checks AWS S3 buckets and objects for misconfigured permissions.☆15Updated last month
- An example of a mis-configured Rails application release under MIT license.☆20Updated last year
- Related subdomains finder☆29Updated 2 years ago
- Pentesting notes☆17Updated last year
- ☆33Updated 6 years ago
- ☆27Updated 5 years ago