Pinned

1. PayloadsAllTheThings Public

   A list of useful payloads and bypass for Web Application Security and Pentest/CTF

   Python 34.8k 9.5k

2. SSRFmap Public

   Automatic SSRF fuzzer and exploitation tool

   Python 1.7k 339

3. GraphQLmap Public

   GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

   Python 723 130

4. SharpLAPS Public

   Retrieve LAPS password from LDAP

   C# 241 43

5. DamnWebScanner Public

   Another web vulnerabilities scanner, this extension works on Chrome and Opera

   Python 327 128

6. Vulny-Code-Static-Analysis Public

   Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

   Python 292 115