ikkisoftFollow
Stars
REST/JSON API to the Burp Suite security tool.
Decompilation as a Service. Explore multiple decompilers and compare their output with minimal effort. Upload binary, get decompilation.
JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.
This experimetal fuzzer is meant to be used for API in-memory fuzzing.
A tampered payload generator to Fuzz Web Application Firewalls
Tool to decompile & extract Android Dex bytecode from Vdex files
Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.
Mallet is an intercepting proxy for arbitrary protocols
Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
awesome list of browser exploitation tutorials
Data retention /cleanup script for mattermost
Tools to gather subdomains from Bug Bounty programs
Create tar/zip archives that can exploit directory traversal vulnerabilities
A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken
SSRF (Server Side Request Forgery) testing resources
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Tool to look for several security related Android application vulnerabilities
Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.
Deprecated please use https://github.com/Netflix/sleepy-puppy
GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
Web-based Traffic and Security Network Traffic Monitoring
J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.