whonow by brannondorsey
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
updated at April 30, 2024, 7:42 p.m.
nano by UltimateHackers
Nano is a family of PHP web shells which are code golfed for stealth.
updated at May 1, 2024, 7:40 p.m.
IPObfuscator by OsandaMalith
A simple tool to convert the IP to a DWORD IP
updated at May 2, 2024, 6:52 a.m.
repo-supervisor by auth0
Scan your code for security misconfiguration, search for passwords and secrets. 
updated at May 5, 2024, 6:14 a.m.
js-vuln-db by tunz
A collection of JavaScript engine CVEs with PoCs
updated at May 7, 2024, 11:12 a.m.
acra by cossacklabs
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
updated at May 7, 2024, 6:10 p.m.
bug-bounty-reference by ngalongc
Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
updated at May 8, 2024, 11:55 p.m.
JoomlaScan by drego85
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
updated at May 9, 2024, 8:59 a.m.
mutual-tls-ssl by Hakky54
🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC, WebSocket and ElasticSearch examples are included
updated at May 9, 2024, 11:52 a.m.
snallygaster by hannob
Tool to scan for secret files on HTTP servers
updated at May 9, 2024, 3:33 p.m.
bXSS by LewisArdern
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
updated at May 9, 2024, 6:04 p.m.
Raccoon by evyatarmeged
A high performance offensive security tool for reconnaissance and vulnerability scanning
updated at May 10, 2024, 1:14 a.m.
plasma by plasma-disassembler
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
updated at May 10, 2024, 1:38 a.m.