test-certs-site

test-certs-site Introduction This is a purpose-built webserver for hosting the test pages required by the CA/Browser forum Baseline Requirements. They contain the following requirement: The CA SHALL host test Web pages that allow Application Software Suppliers to test their software with Subscrib...

spurt

Spurt Introduction Spurt is a powerful stress testing tool designed to simulate high volumes of traffic and evaluate the performance and resilience of web servers. It has been tested on Linux. Spurt first checks if the target URL is valid. A custom module is used to generate common "User-Agent" a...

finalrun-agent

finalrun.app • Docs • Blog • Cloud Device Waitlist • Join Slack Community Follow us on finalrun-agent is an AI-driven CLI that tests your Android and iOS apps using natural language. You write a plain-English test in YAML, FinalRun launches your app on an emulator or simulator, uses an AI model...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

CodeTest

Welcome to CodeTest 👉About This Project The main purpose of this project: to provide a unified execution entry point using a visual interface for Python POC\EXP test scripts collected daily, making it convenient to run. Target audience: penetration testers with a Python foundation the tool comes...

awesome-security

Awesome Security A collection of awesome software, libraries, documents, books, resources and cool stuff about security. Inspired by awesome-php, awesome-python. Thanks to all contributors, you're awesome and wouldn't be possible without you! The goal is to build a categorized community-driven...

Zerodoor

ZeroDoor A script written lazily for generating reverse shell backdoors on the go whenever you need without any hassle for your daily penetration needs . These backdoors are not james bond high tech stuff but rather simple ones to prevent over exploitation and limited capabilities Once you genera...

mail-security-tester

Mail Security Testing Framework A testing framework for mail security and filtering solutions. IMPORTANT: Don't do anything evil with this! Tests of cloud or otherwise hosted solutions should always be approved by the tested provider. Only use your own test accounts and don't annoy anyone with a...

fockcache

fockcache FockCache - Minimalized Test Cache Poisoning Detail For Cache Poisoning : https://portswigger.net/research/practical-web-cache-poisoning FockCache FockCache tries to make cache poisoning by trying X-Forwarded-Host and X-Forwarded-Scheme headers on web pages. After successful result, it...

codeql

CodeQL This open source repository contains the standard CodeQL libraries and queries that power GitHub Advanced Security and the other application security products that GitHub makes available to its customers worldwide. How do I learn CodeQL and run queries? There is extensive documentation abo...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilit...

BurpAPISecuritySuite

Support Development If this project helps your work, support ongoing maintenance and new features. ETH Donation Wallet 0x11282eE5726B3370c8B480e321b3B2aA13686582 Scan the QR code or copy the wallet address above. BurpAPISecuritySuite...

bypass-url-parser

Bypass Url Parser 该工具测试多种URL绕过技术，以访问40X保护的页面。 如果你好奇为什么这段代码只不过是一个简陋的curl封装，原因如下： 大多数Python请求库会对URL/路径/参数进行编码/解码，而我讨厌这一点。 如果我提交原始字符，我就要发送原始字符。 如果我发送一个奇怪的路径，我就想要它保持奇怪，而不是被标准化。 在Python中，要在不丢失库的所有好处（如解析、SSL/TLS封装等）的情况下实现这一点，出乎意料地困难。 所以，像我一样，使用curl作为后端，这就行了。 此外，该工具也可以作为库使用，参见libsampleusage.py 安装...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

PowerProxy

PowerProxy PowerShell SOCKS proxy with reverse proxy capabilities. PowerProxy is written with penetration testers in mind. Reverse proxy functionality is a priority, for traversing networks that block inbound connections. Reverse proxy connections are encrypted by default. Username/Password...

VeilTransfer

VeilTransfer 2.0 VeilTransfer 是一款数据外传工具，旨在测试和增强检测能力。该工具模拟高级威胁行为者使用的真实数据外传技术，使组织能够评估并改进其安全态势。通过利用 MEGA、GitHub、SFTP、WebDAV 等多种外传方法，VeilTransfer 可帮助识别防御中的缺口，并确保您的安全解决方案已准备好应对现代数据泄露。 支持的外传方法 MEGA GitHub Dropbox Telegram Pastebin WebDAV Webhook SFTP FTP DoH（基于 HTTPS 的 DNS） QUIC ICMP MITRE ATT&CK 映射 ID...

intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

AuthMatrix

AuthMatrix v0.8.2 AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services. With AuthMatrix, testers focus on thoroughly defining tables of users, roles, and requests for their specific target application upfront. These tables...

xalgorix

Xalgorix — Open-source AI pentester that proves vulnerabilities Most scanners detect. Xalgorix proves. An autonomous LLM agent works a full pentest methodology, then an independent verifier re-exploits every finding before it's reported — so you get proof, not a pile of maybes to triage...

machine_learning_security

机器学习与安全 关于机器学习与安全的源代码。 目录 网络安全与机器学习课程 面向安全工程师的机器学习初级培训课程。 机器学习漏洞 机器学习漏洞总结。 分析 使用k-means分析数据包捕获数据。 CNNtest 生成针对CNN的对抗样本。 Deep Exploit 使用机器学习的全自动渗透测试工具。 Deep Exploit 曾在 Black Hat USA 2018 Arsenal 、Black Hat EURO 2018 Arsenal 以及 DEF CON 26! AI Village 展示。 GyoiThon 下一代渗透测试工具。 GyoiThon 曾在 Black Hat AS...