Pinned

1. PayloadsAllTheThings Public

   A list of useful payloads and bypass for Web Application Security and Pentest/CTF

   Python 38.9k 10.6k

2. SSRFmap Public

   Automatic SSRF fuzzer and exploitation tool

   Python 1.9k 376

3. GraphQLmap Public

   GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

   Python 853 141

4. SharpLAPS Public

   Retrieve LAPS password from LDAP

   C# 279 52

5. DamnWebScanner Public

   Another web vulnerabilities scanner, this extension works on Chrome and Opera

   Python 346 133

6. Vulny-Code-Static-Analysis Public

   Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

   PHP 307 119