web-application-security

Automated NoSQL database enumeration and web application exploitation tool.

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

Second-order subdomain takeover scanner

Awesome information for WebSockets security research

Wayback Machine OSINT Framework

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.