Automated Security Testing For REST API's

Open-Source Web UI for Apache Kafka Management

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.

Find and verify credentials

Find, verify, and analyze leaked credentials

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Organize your API security assessment by using MindAPI. It's free and open for community collaboration.

Mind-Maps of Several Things

GraphQL automated security testing toolkit

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key algorithms.

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

This script is intended to automate your reconnaissance process in an organized fashion

This script is intended to automate your reconnaissance process in an organized fashion

Collection of methodology and test case for various web vulnerabilities.

Collection of methodology and test case for various web vulnerabilities.

Ressources for bug bounty hunting

Web application fuzzer

🔥 Web-application firewalls (WAFs) from security standpoint.

🔥 Web-application firewalls (WAFs) from security standpoint.

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

All the labs in this repository simulate real world bugs I found in the wild

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An OOB interaction gathering server and client library

An OOB interaction gathering server and client library

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Bypass 401 & 403 and scans multiple endpoints only output 200 or 500