omar2535 / GraphQLer

Related projects: ⓘ

• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆95Updated 7 months ago
• usdAG / FlowMate
  FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…
  ☆151Updated 3 weeks ago
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆127Updated last year
• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆110Updated last year
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆193Updated 4 months ago
• cybervelia / graphicator
  A GraphQL enumeration and extraction tool
  ☆127Updated last year
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆97Updated 5 months ago
• AdnaneKhan / Gato-X
  GitHub Attack Toolkit - Extreme Edition
  ☆151Updated this week
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆74Updated last month
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆64Updated 2 months ago
• nccgroup / ccs
  ☆108Updated last year
• trufflesecurity / of-CORS
  ☆143Updated last year
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆134Updated 3 months ago
• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆250Updated 2 months ago
• elttam / semgrep-rules
  ☆173Updated 6 months ago
• nccgroup / cq
  ☆115Updated last year
• nxenon / grpc-pentest-suite
  gRPC-Web Pentesting Suite + Burp Suite Extension
  ☆159Updated 2 months ago
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆182Updated last month
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆146Updated 6 months ago
• dwisiswant0 / ipfuscator
  A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representati…
  ☆84Updated last year
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆138Updated 3 years ago
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆131Updated this week
• xscorp / jsmug
  A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON
  ☆112Updated 5 months ago
• projectdiscovery / openrisk
  openrisk is a tool that generates a risk score based on the results of a Nuclei scan.
  ☆162Updated 4 months ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆19Updated last month
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆38Updated 9 months ago
• google / protobuf-extensibility-for-burp
  ☆81Updated 2 months ago
• caido / workshop-defcon
  ☠️ Code for the Defcon Workshop
  ☆20Updated last month
• binareio / FastCVE
  FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)
  ☆37Updated last month
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆119Updated 3 weeks ago