An async Python micro framework for building web applications.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Nginx configuration static analyzer

Various webshells. We accept pull requests for additions to this collection.

Pull out bits of URLs provided on stdin

A curated list of awesome Android Reverse Engineering training, resources, and tools.

Check your WAF before an attacker does

A curated list of awesome C++ (or C) frameworks, libraries, resources, and shiny things. Inspired by awesome-... stuff.

A curated list of awesome Nginx distributions, 3rd party modules, Active developers, etc.

List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

Main repository for pfSense

The easiest way to run WireGuard VPN + Web-based Admin UI.

WireGuard Web UI for self-serve client configurations, with optional auth.

A curated list of WireGuard tools, projects, and resources.

A curated list of awesome Kotlin frameworks, libraries, documents and other resources

A curated list of various bug bounty tools

Web application fuzzer

Scanning pastebin with yara rules

A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups

In-depth attack surface mapping and asset discovery

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

Fast subdomains enumeration tool for penetration testers

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

🛡️ Open-source and next-generation Web Application Firewall (WAF)

This is a webshell open source project

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

📜 Yet another collection of wordlists

Directory/File, DNS and VHost busting tool written in Go