sql-injection-payload-list by payloadbox

🎯 SQL Injection Payload List

created at Oct. 30, 2019, 5:03 a.m.

Unknown languages

91 +0

4,470 +20

1,096 +4

GitHub
AwesomeXSS by UltimateHackers

Awesome XSS stuff

created at March 11, 2018, 2:35 p.m.

JavaScript

240 +0

4,673 +7

759 +1

GitHub
js-xss by leizongmin

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

created at Sept. 18, 2012, 2:05 p.m.

HTML

117 +0

5,128 +4

632 +1

GitHub
Infosec_Reference by rmusser01

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

created at Sept. 13, 2014, 12:08 a.m.

CSS

267 +0

5,410 +14

1,181 +3

GitHub
aquatone by michenriksen

A Tool for Domain Flyovers

created at Nov. 19, 2015, 11:30 a.m.

Go

135 +0

5,512 +6

864 +0

GitHub
wfuzz by xmendez

Web application fuzzer

created at Oct. 22, 2014, 9:23 p.m.

Python

168 +0

5,712 +18

1,333 +1

GitHub
xss-payload-list by payloadbox

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

created at April 23, 2018, 6:09 a.m.

Unknown languages

138 +0

5,789 +21

1,594 +2

GitHub
gitrob by michenriksen

Reconnaissance tool for GitHub organizations

created at Jan. 7, 2015, 1:58 p.m.

Go

154 +0

5,852 +0

822 +0

GitHub
fuzzdb by fuzzdb-project

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

created at Sept. 10, 2015, 5:54 p.m.

PHP

367 +0

8,015 +14

2,085 +2

GitHub
wpscan by wpscanteam

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

created at July 11, 2012, 8:27 p.m.

Ruby

266 +0

8,307 +12

1,245 +1

GitHub
Sublist3r by aboul3la

Fast subdomains enumeration tool for penetration testers

created at Dec. 15, 2015, 12:55 a.m.

Python

235 +1

9,397 +36

2,062 +3

GitHub
beef by beefproject

The Browser Exploitation Framework Project

created at Nov. 23, 2011, 6:53 a.m.

JavaScript

439 +0

9,462 +16

2,078 +6

GitHub
juice-shop by juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

created at Sept. 19, 2014, 2:53 p.m.

TypeScript

157 +1

9,696 +19

9,622 +55

GitHub
prowler by prowler-cloud

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

created at Aug. 24, 2016, 3:12 p.m.

Python

117 +0

9,788 +54

1,417 +6

GitHub
webshell by tennc

This is a webshell open source project

created at May 23, 2013, 7:37 a.m.

PHP

489 +0

9,854 +9

5,569 +6

GitHub
Photon by UltimateHackers

Incredibly fast crawler designed for OSINT.

created at March 30, 2018, 7:38 p.m.

Python

322 +0

10,599 +11

1,457 +0

GitHub
XSStrike by UltimateHackers

Most advanced XSS scanner.

created at June 26, 2017, 7:24 a.m.

Python

273 +0

12,836 +27

1,861 +3

GitHub
DOMPurify by cure53

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

created at Feb. 17, 2014, 9:48 p.m.

JavaScript

150 +1

13,075 +39

680 +2

GitHub
gitleaks by gitleaks

Protect and discover secrets using Gitleaks 🔑

created at Jan. 27, 2018, 6:19 p.m.

Go

154 +1

15,536 +86

1,335 +7

GitHub
nuclei by projectdiscovery

Fast and customizable vulnerability scanner based on simple YAML based DSL.

created at April 3, 2020, 6:47 p.m.

Go

216 +1

17,876 +241

2,287 +14

GitHub