Take it like a gift

bundler-audit
bundler-audit

Patch-level verification for Bundler.

XSS Radar
XSS Radar

A Chrome extension for fast and easy XSS fuzzing.

Sirius
Sirius

Truly open-source general purpose vulnerability scanner.

FuzzDB
FuzzDB

Attack patterns and primitives for black-box application fault injection and resource discovery.

Shodan
Shodan

Search engine for Internet-connected devices.

NetworkMiner
NetworkMiner

Network forensic analysis tool for Windows.

bWAPP
bWAPP

An extremely buggy web application!.

prototype-pollution-exploits
prototype-pollution-exploits

Prototype Pollution exploits collection.

http-request-smuggling
http-request-smuggling

HTTP Request Smuggling Detection Tool.

Fuzzilli
Fuzzilli

A JavaScript Engine Fuzzer.

APKiD
APKiD

Android application identifier for packers, protectors, obfuscators and oddities.

Villain
Villain

Backdoor generator and multi-session handler for sessions sharing among connected sibling servers.

gittyleaks
gittyleaks

Find sensitive information for a git repo.

Genzai
Genzai

Helps to identify IoT related dashboards and scan them for default passwords.

tko-subs
tko-subs

A tool that can help detect and takeover subdomains with dead DNS records.