jcrashkit Goto Github PK

nothing-to-see-here

Mostly bash functions for testing sites

owasp-web-checklist

OWASP Web Application Security Testing Checklist

panizza

:pizza: Panizza is a minimalist boilerplate for using zurb's panini templating system.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phpggc

poc-graphql

Research on GraphQL from an AppSec point of view.

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

retrofit

A type-safe HTTP client for Android and the JVM

rtspfuzzer

RTSP network protocol fuzzer

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shocker

A tool to find and exploit servers vulnerable to Shellshock

singularity

A DNS rebinding attack framework.

structured-dotmil-domains

The structured repository of .mil domains. The URLs of web-services will be added also in the future (since domains, without known ports where services are running, are not much usable for the bulk testing)

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

unsafe-xmlrpc

viewstatepayloadgenerator

ViewState Payload Generator

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

webthing

Iot webthing using mozilla gateway for raspberry pi

whonow

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

wssip

Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

x-frame-bypass

Web Component extending IFrame to bypass X-Frame-Options: deny/sameorigin

xsstrike

Most advanced XSS scanner.

ysoserial.net

Deserialization payload generator for a variety of .NET formatters