A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Odoo. Open Source Apps To Grow Your Business.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

GFPGAN aims at developing Practical Algorithms for Real-world Face Restoration.

Automatic SQL injection and database takeover tool

Recovers passwords from pixelized screenshots

Ready-to-use OCR with 80+ supported languages and all popular writing scripts including Latin, Chinese, Arabic, Devanagari, Cyrillic and etc.

A Deep Learning based project for colorizing and restoring old images (and video!)

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Avatars for Zoom, Skype and other video-conferencing apps.

Most advanced XSS scanner.

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

📱 objection - runtime mobile exploration

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

Scanning APK file for URIs, endpoints & secrets.

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Outpainting with Stable Diffusion on an infinite canvas

The Leading Security Assessment Framework for Android.

An enterprise friendly way of detecting and preventing secrets in code.

Python serial port access library

An OSINT tool to search for accounts by username and email in social networks.

A tool to dump a git repository from a website

Code for the paper: Detecting Photoshopped Faces by Scripting Photoshop

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

Binary instrumentation framework based on FRIDA

Open source vulnerability DB and triage service.

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Simple dashboard for WireGuard VPN written in Python w/ Flask