Starred repositories
MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information.…
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.
APIKit：Discovery, Scan and Audit APIs Toolkit All In One.
sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件
Automatic SSTI detection tool with interactive interface
File upload vulnerability scanner and exploitation tool.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …
Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.
Imperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.
jsleak is a tool to find secret , paths or links in the source code during the recon.
A python script that finds endpoints in JavaScript files
Private chat with local GPT with document, images, video, etc. 100% private, Apache 2.0. Supports oLLaMa, Mixtral, llama.cpp, and more. Demo: https://gpt.h2o.ai/ https://gpt-docs.h2o.ai/
Platform to experiment with the AI Software Engineer. Terminal based. NOTE: Very different from https://gptengineer.app
graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.
