Moxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities to assist and automate pentesting workflows.
☆128Jan 22, 2026Updated 9 months ago
Alternatives and similar repositories for Moxy
Users that are interested in Moxy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- More than just an agent harness for pentesting, yet lightweight and transparent.☆42Oct 7, 2026Updated 2 weeks ago
- ☆18Sep 25, 2026Updated last month
- Personal cybersecurity wiki and lab notebook tracking my journey from zero to junior penetration tester, with structured Markdown notes, …☆23Apr 1, 2026Updated 6 months ago
- Explore 'All Wordlist' repository for a vast collection of wordlists essential for web fuzzing and testing. From API endpoints to common …☆19Sep 27, 2024Updated 2 years ago
- Lightweight, customizable enumeration script to aid in time-saving when participating in hacking labs or OSCP exam.☆32Feb 18, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Mutation-driven HTTP fuzzing for Burp Suite☆15Mar 2, 2026Updated 7 months ago
- Get list of subsidiaries for a selected company☆32Dec 21, 2024Updated last year
- Repository created to share information about tactics, techniques and procedures used by threat actors. Initially with ransomware groups …☆50Updated this week
- A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow.☆23Feb 6, 2026Updated 8 months ago
- Useful Alfred Snippets for Pentest☆18Dec 5, 2024Updated last year
- Hunt for AI coding artifacts containing secrets.☆58May 19, 2026Updated 5 months ago
- Finds the detection rules in your SIEM that are running blind☆22Sep 6, 2026Updated last month
- Chromecast Receiver application for Stremio☆17Apr 8, 2024Updated 2 years ago
- RID Hijacking Proof of Concept script by Kevin Joyce☆15Oct 30, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Solutions from @PortSwigger labs☆15Apr 11, 2024Updated 2 years ago
- Generate HID attack strings for Kali Nethunter☆13Mar 20, 2015Updated 11 years ago
- Educational reverse shell command generator for authorized lab testing.☆21Jan 30, 2026Updated 8 months ago
- ☆17Dec 4, 2023Updated 2 years ago
- Shadow Credentials using altSecurityIdentities.☆14May 30, 2022Updated 4 years ago
- ☆13Mar 4, 2023Updated 3 years ago
- GromHacks Labs -- The payload lists they don't want you to have. 1,324 injection probes beamed down from the mothership to detect what's …☆37Oct 12, 2026Updated 2 weeks ago
- I’m building a hands‑on Security Operations Center (SOC) home lab from scratch and documenting my progress as I learn defensive security …☆17Oct 18, 2026Updated last week
- Offline multi-language call graph generator in Rust — point at any folder, get a graph.☆45Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Ansible role to detect Log4Shell exploitation attempts☆18Dec 22, 2021Updated 4 years ago
- Dataset fingerprinting for AIBOM☆16Sep 30, 2026Updated 3 weeks ago
- Burp suite extension that lets you easily copy issues☆17Apr 3, 2026Updated 6 months ago
- Progzee is a Python library for simplifying IP proxy usage in HTTP requests.☆17Feb 28, 2025Updated last year
- GhostCVEs☆22Updated this week
- public-pentesting-reports☆13Aug 23, 2016Updated 10 years ago
- ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …☆35Dec 13, 2023Updated 2 years ago
- "Pure" powershell command (no dependencies, no special permissions etc') to retrieve change history in an AD group membership. relies on …☆12Nov 30, 2025Updated 10 months ago
- Attack surface discovery and AI-assisted triage for security researchers. Endpoint & parameter mapping with actionable testing hints.☆46Jan 12, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A personalised Spotify quiz based on the music you listen to☆14Mar 24, 2021Updated 5 years ago
- a physical pentesting toolkit on a regular Raspberry Pi Pico☆15Jun 25, 2024Updated 2 years ago
- Burp Suite extension that enhances Burp Active Scan by adding template engine specific SSTI payloads.☆28Feb 20, 2024Updated 2 years ago
- Putting the analysis in steganalysis.☆13Jan 12, 2026Updated 9 months ago
- An AI-Powered Bug Bounty Hunting Platform - Comprehensive MCP server for security testing, vulnerability research, and bug bounty hunting☆48Jul 24, 2026Updated 3 months ago
- EZGHSA is a command-line tool for summarizing and filtering vulnerability alerts on Github repositories.☆35Jan 4, 2026Updated 9 months ago
- My experiments in weaponizing ONOS applications (https://github.com/opennetworkinglab/onos)☆22Sep 29, 2026Updated 3 weeks ago