aurora

Aurora This is a proof-of-concept web app built on top of Frida. To get started: npm install grunt server Then point your web browser at http://127.0.0.1:8010/...

RedTeam_toolkit

RedTeam Toolkit Note: Only legal activities should be conducted with this project. Red Team Toolkit is an Open-Source Django Offensive Web-App containing useful offensive tools used in the red-teaming together for the security specialist to identify vulnerabilities. The cybersecurity open-source...

kraken

Warning I have been reviewing the Kraken-Client code and since this was my first ever react app, its old, clunky and it needs major improvement the server needs some work too. In the next few weeks/months I will do my best to rewrite it in either updated React or in another framework. Please feel...

Web-App-PenTesting

🚀 Quick Start 1. Clone the repository git clone https://github.com/Sarthak4126/Web-App-PenTesting.git cd Web-App-PenTesting/targetapp 2. Install dependencies pip install -r requirements.txt 3. Launch the target application python app.py App runs at: http://127.0.0.1:5000 4. Run the automated...

domain-to-webapp

domain-to-webapp A simple bash script for finding web application hosted within a domain Requirements curl Subfinder docker image Usage $./webAppChecker businesssolutions.com ./ouputdir ./scope.txt | \ | | \ \ / /| | / \ | | | |/ | ' \ / | | ' \ | / \ \ \ /\ / / \ ' \ / \ | ' | ' \ | || | | | | |...

insightsnexus

Insight Nexus - OSINT Investigation Graph Analysis Tool This local web application allows users to manipulate and connect nodes on their screen to streamline OSINT investigations and information gathering. Demo Become an Alpha Tester Sign Up Here: https://insightsnexus.org/ Features Core Graph...

bom-view

BOM View A simple, static web application for displaying software dependencies from Software Bill of Materials SBOM files. Being a static site, it can be easily hosted on any static web hosting service, such as GitLab Pages, GitHub Pages, or Netlify. Features SBOM Viewer : Displays components fro...

mobileAudit

Mobile Audit Security analysis for Android APKs, from upload to actionable findings. Mobile Audit is a Django application for static application security testing and malware inspection. It extracts APK metadata, detects risky implementation patterns, organizes findings by severity, and provides a...

filekey

🔐 FileKey FileKey is an offline web app that lets you quickly encrypt and share files using passkeys. No accounts, no tracking, no cloud. 🛡️ FileKey is free, open source, and privacy-first. Live at filekey.app. 🚀 Features ✅ Free & Open Source – Licensed under GPLv3. ✅ Accountless – No logins, no...

malwinx

Malwinx A normal flask web app to learn win32api with code snippets and references. Prerequisite You need to download the following package before starting it pip install flask pip install pefile pip install requests Usage $ python flaskapp.py Live Demo https://www.youtube.com/watch?v=z7snPXRG3M...

kanha

Kanha - A web-app pentesting suite written in rust 🦀 Installation ⦾ Subcommands ⦾ Contribute !-----------------------------------------------------line Kanha is a tool that can help you perform, a variety of attacks based on the target domain . With just kanha you can do, Fuzzingwiki-fuzzing,...

analyzer

This project automates the daily tasks of Threat Intelligence Analyzer role internally without external resources' interaction. It analyzes, visualizes and structures sensitive files Malware or data by extracting features, artifacts and IoC using different modules. The output of those modules can...

hashview

Hashview v0.8.2 Hashview is a tool for security professionals to help organize and automate the repetitious tasks related to password cracking. It is broken into two compoents, the Hashview Server, and Hashview Agent. The Hashview Server is a web application that manages one or more agents,...

osint-menace

Installed addon integration Restore the exact upstream sources before building from a clean checkout: python3 addons/fetch.py docker compose up -d --build Open http://localhost:8088/addons. All twelve sources are pinned by commit in manifest.json, with their original licenses in sources//...

creep-web-app-scanner

creep-web-app-scanner A very primitive website scanner currently under development by an NCC Group employee and University graduate with 20% research time. creep currently crawls a site, and searches for potentially interesting information within each page. creep will crawl your HTTP only target...

defenselessV1

defenselessV1 Defenseless is a vulnerable web application written in PHP/MySQL. This is the first version of this application. The purpose of this application is to create security awareness among developers and new guys in application security. It would soon be updated with with more bugs and a...

ThePhish

ThePhish ThePhish is an automated phishing email analysis tool based on TheHive, Cortex and MISP. It is a web application written in Python 3 and based on Flask that automates the entire analysis process starting from the extraction of the observables from the header and the body of an email to t...

AutoPWN-Suite

AutoPWN Suite AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically. release --- Security Badges OpenSSF Best Practices Passing OpenSSF Best Practices Silver OpenSSF Best Practices Gold OpenSSF Baseline 1 OpenSSF Baseline 2 OpenSSF Baseline 3 OpenSSF Scoreca...

Vigil

Find bugs, follow the code, and prove what an attacker can do. Vigil is an AI harness for code audits, web pentests, and bug bounty hunting. It coordinates Claude Code or Codex through broad review, focused rereads, authenticated testing, and runtime reproduction. Start with a codebase, a live...

CVE-2018-19518

CVE-2018-19518 last rapport here : https://gitlab.com/ensimag-security/CVE-2018-19518/-/jobs/artifacts/master/raw/rapport.pdf?job=PDF Usage run app docker-compose up -d example normal usage for the web app. imap : webmail.grenoble-inp.org user : [email protected] password : xxx exploit using...