Awesome-Fuzzing

Welcome to Awesome Fuzzing A curated list of fuzzing resources Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on for learning Fuzzing and initial phases of Exploit Development like root cause analysis. Contents Books Courses Free Paid Videos NYU...

Penetration_Testing_POC

PenetrationTestingPOC A collection of POCs, scripts, tools, articles, and other tips and tricks used in penetration testing, serving as notes. Contributions are welcome. Please be aware of whether all tools contain backdoors or other abnormal behavior. It is recommended to operate in a virtual...

www-project-top-10-for-large-language-model-applications

www-project-top-10-for-large-language-model-applications OWASP Foundation Web Repository OWASP Top 10 for Large Language Model Applications Welcome to the official repository for the OWASP Top 10 for Large Language Model Applications! About This Repository This repository contains the OWASP Top 1...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

py3webfuzz

Py3webFuzz ';-- Python Web Fuzzing module Library Python3 Module Compatible Author Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Contributors Nathan Hamiel @nathanhamiel DESCRIPTION Based on pywebfuzz, Py3webfuzz is a Python3 module to assist in the identification of...

ligolo-iwa

Ligolo-IWA A Ligolo-ng JavaScript agent working inside Chrome/Chromium-based browsers by leveraging Isolated Web Applications. See the Ligolo-IWA doc for quick setup: Ligolo-IWA Setup/Quickstart And don't forget to read the Ligolo-ng documentation: 📑 Ligolo-ng Documentation Setup/Quickstart Local...

open-source-llm-scanners

open-source-llm-scanners A list of open source LLM security scanners on GitHub, ordered by Stars. It does not provide in-depth analysis. A minimum of 10 stars are needed as a low bar 😁 Related: open-source-web-scanners LLM Scanners Tools which can find a range of vulnerabilities in LLM...

HBSQLI

HBSQLI: Automated Tester For Header Based Blind SQL Injection HBSQLI is an automated command-line tool for performing Header Based Blind SQL injection attacks on web applications. It automates the process of detecting Header Based Blind SQL injection vulnerabilities, making it easier for security...

flatpak

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. See https://flatpak.org/ for more information. Flatpak is available in the package repositories of most Linux distributions and can be installed from there. See https://flatpak.org/setup/ for quic...

bento

This software is exprimental but we accept suggestions and contributions Bento Toolkit for PT and CTF A bento 弁当, bentō is a single-portion take-out or home-packed meal of Japanese origin. Bento Toolkit is a simple and minimal docker container for penetration testers and CTF players. It has the...

The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

tealtiger

TealTiger AI Agent Security & Governance SDK Deterministic governance, guardrails, cost tracking, and policy management for LLM applications. Open source. TypeScript + Python. Works with any provider. Website · Documentation · Examples · Discord · Contributing ⚡ 60-second quickstart Install: npm...

pbtk

pbtk - Reverse engineering Protobuf apps Protobuf is a serialization format developed by Google and used in an increasing number of Android, web, desktop and more applications. It consists of a language for declaring data structures , which is then compiled to code or another kind of structure...

noia

Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...

hakuin

Hakuin is a Blind SQL Injection BSQLI optimization and automation framework written in Python 3. It abstracts away the extraction logic and allows users to easily and efficiently dump databases from vulnerable web applications. To speed up the process, Hakuin utilizes a variety of optimization...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

rengine

reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner 🚀 reNgine 2.2.0 is released! reNgine 2.2.0 comes with bounty hub where you can sync and import your hackerone programs, in app notifications, chaos as subdomain enumeration tool, ability to upload multiple nuclei and gf patterns,...

LLMMap

LLMMap LLMMap is an automated prompt injection testing framework for LLM-integrated applications. It discovers injection points in HTTP requests, generates targeted attack prompts using a dual-LLM architecture, fires them at the target, and confirms findings with statistical reliability testing...

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis...