Scripts to download every Wordpress plugin (updated in the last 2 years) and run Semgrep over the lot of it while storing output in a database.
☆89Feb 9, 2025Updated last year
Alternatives and similar repositories for wordpress-audit-automation
Users that are interested in wordpress-audit-automation are comparing it to the libraries listed below
Sorting:
- Standardised setup for researching WordPress plugin- and theme vulnerabilities.☆29Feb 24, 2026Updated last week
- ☆12Sep 4, 2023Updated 2 years ago
- API fuzzer that exposes security flaws by sending malformed inputs☆16Sep 4, 2024Updated last year
- Find related domains of a given domain.☆104Aug 5, 2023Updated 2 years ago
- DNS resolution tracing tool☆35Jun 29, 2021Updated 4 years ago
- Offensive recon with GitHub Actions☆11Aug 25, 2024Updated last year
- undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it ge…☆53Jul 17, 2025Updated 7 months ago
- Parse FFUF results in GUI with option to sort based by response code , size , keyword☆100Sep 9, 2024Updated last year
- Subdomains wordlist generted from subdomains of public bug bounty programs☆11Mar 25, 2025Updated 11 months ago
- Blind XSS SVG☆10Mar 27, 2023Updated 2 years ago
- Extracting unpacked dec files from running application using frida.☆44Apr 16, 2023Updated 2 years ago
- Hadoken: A versatile Active Directory pentesting tool engineered to identify vulnerabilities and streamline security assessments.☆46Oct 26, 2025Updated 4 months ago
- This repository houses diverse files and challenges centered around Just Mobile Security. With practical exercises and resources aimed at…☆13Apr 15, 2024Updated last year
- KERnano: The No-install Python Pen Testing kit. (Windows & Linux)☆13Sep 2, 2022Updated 3 years ago
- 🔗 Source for the Caido plugin store☆16Feb 17, 2026Updated 2 weeks ago
- Simple username generator based on a list of name and surname☆13May 20, 2021Updated 4 years ago
- Custom Trickest Workflows☆12Oct 26, 2023Updated 2 years ago
- TUDO — A Vulnerable PHP Web App☆128Dec 22, 2025Updated 2 months ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆30Oct 21, 2025Updated 4 months ago
- Nuclei plugin for BurpSuite☆15Nov 29, 2024Updated last year
- Webapp to perform regexp search over GitHub search.☆17Dec 2, 2022Updated 3 years ago
- All-in-One WP Migration-Backup-Finder☆15Nov 5, 2025Updated 4 months ago
- Intercept php includes☆16Dec 23, 2019Updated 6 years ago
- Dump paths & pages from Next.js Manifest☆15Mar 19, 2024Updated last year
- Assess Windows OS for security misconfigurations and hardening opportunities.☆36Jul 20, 2024Updated last year
- A tool to list the SSH clone URLs for all GitHub repos for a given user☆14Feb 7, 2016Updated 10 years ago
- This map lists the essential techniques to bypass anti-virus and EDR☆15Aug 9, 2023Updated 2 years ago
- Automatically look for paramater reflections in the HTTP response☆17Apr 30, 2025Updated 10 months ago
- An AI-powered assistant for hackers and security professionals built for Caido☆31Jan 24, 2026Updated last month
- Get all NetNTLM Hashes via Different zero-click Methodologies from LLMNR Poisoning☆18Mar 16, 2022Updated 3 years ago
- ☆108Jul 17, 2024Updated last year
- An Android SSL Pinning Remover tool for Security research and Bug Bounty☆43Jun 1, 2023Updated 2 years ago
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated last year
- ☆12Aug 1, 2022Updated 3 years ago
- One line command and control backdoors for APIs and web applications.☆51Apr 9, 2024Updated last year
- ☆73Nov 5, 2018Updated 7 years ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆778Aug 19, 2024Updated last year
- ☆36Jul 15, 2020Updated 5 years ago
- Discover new target domains using Content Security Policy☆505Feb 7, 2026Updated 3 weeks ago