APIDetector APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains...
WebApp PenTest
pphack pphack is a CLI tool for scanning websites for client-side prototype pollution vulnerabilities. Feature Fast (concurrent...
SmuggleFuzz SmuggleFuzz is designed to assist in identifying HTTP downgrade attack vectors. Its standout feature is not...
Damn Vulnerable RESTaurant An intentionally vulnerable API service designed for learning and training purposes dedicated to developers,...
secator secator is a task and workflow runner used for security assessments. It supports dozens of well-known...
Arjun Arjun can find query parameters for URL endpoints. If you don’t get what that means, it’s...
Emora Emora allows you to search for accounts by username across social networks. Inspired by tools like Sherlock,...
OSTE-Meta-Scanner This project aims to simplify the field of Dynamic Application Security Testing. The OSTE meta scanner...
OWASP OFFAT OWASP OFFAT (OFFensive Api Tester) is created to automatically test API for common vulnerabilities after...
git-alerts: detect and monitor GitHub org users’ public repositories for secrets and sensitive files
git-alerts: detect and monitor GitHub org users’ public repositories for secrets and sensitive files
GitAlerts GitHub repositories created under any organization can be controlled by the GitHub administrators. However, any repository...
SiCat – The useful exploit finder SiCat is an advanced exploit search tool designed to identify and...
SessionProbe SessionProbe is a multi-threaded pentesting tool designed to assist in evaluating user privileges in web applications....
Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens...
Sessionless Sessionless is a Burp Suite extension for editing, signing, verifying, and attacking signed tokens: Django TimestampSigner, ItsDangerous...
TInjA – the Template INJection Analyzer TInjA is a CLI tool for testing web pages for template injection vulnerabilities....