EyeWitness by ChrisTruncer
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
created at Feb. 26, 2014, 4:23 p.m.
charsetinspect by hack-all-the-things
A script that inspects multi-byte character sets looking for characters with specific user-defined properties
created at June 23, 2016, 3:09 p.m.
ntlm_challenger by b17zr
Parse NTLM challenge messages over HTTP and SMB
created at Nov. 4, 2019, 10:27 p.m.
Reverse-Shell-Manager by WangYihang
A multiple reverse shell session/client manager via terminal
created at Oct. 23, 2017, 1:41 a.m.
IPObfuscator by OsandaMalith
A simple tool to convert the IP to a DWORD IP
created at April 30, 2016, 11:32 p.m.
bXSS by LewisArdern
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
created at Dec. 13, 2017, 11:49 p.m.
dtd-finder by GoSecure
List DTDs and generate XXE payloads using those local DTDs.
created at July 15, 2019, 8:13 p.m.
cssInjection by dxa4481
Stealing CSRF tokens with CSS injection (without iFrames)
created at Feb. 4, 2018, 4:09 a.m.
DVCS-Pillage by evilpacket
Pillage web accessible GIT, HG and BZR repositories
created at June 18, 2011, 8:04 p.m.
open-redirect-payload-list by payloadbox
🎯 Open Redirect Payload List
created at Aug. 15, 2019, 3:29 p.m.
mutual-tls-ssl by Hakky54
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
created at Nov. 11, 2018, 7:07 p.m.
BadLibrary by SecureSkyTechnology
vulnerable web application for training
created at Dec. 13, 2017, 6:43 a.m.