REST/JSON API to the Burp Suite security tool.

Terminal based presentation tool

An extension to use Semgrep inside Burp Suite.

AppSec Ezine Public Repository.

Decompilation as a Service. Explore multiple decompilers and compare their output with minimal effort. Upload binary, get decompilation.

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

A tampered payload generator to Fuzz Web Application Firewalls

Tool to decompile & extract Android Dex bytecode from Vdex files

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

Mallet is an intercepting proxy for arbitrary protocols

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

awesome list of browser exploitation tutorials

Data retention /cleanup script for mattermost

Tools to gather subdomains from Bug Bounty programs

Create tar/zip archives that can exploit directory traversal vulnerabilities

A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken

SSRF (Server Side Request Forgery) testing resources

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Tool to look for several security related Android application vulnerabilities

Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

Deprecated please use https://github.com/Netflix/sleepy-puppy

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.

Web-based Traffic and Cybersecurity Network Traffic Monitoring

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.