Pinned

1. PayloadsAllTheThings

   A list of useful payloads and bypass for Web Application Security and Pentest/CTF

   Python 15.9k 5.1k

2. SSRFmap

   Automatic SSRF fuzzer and exploitation tool

   Python 1.1k 236

3. GraphQLmap

   GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

   Python 286 60

4. Wordpresscan

   WPScan rewritten in Python + some WPSeku ideas

   Python 397 155

5. DamnWebScanner

   Another web vulnerabilities scanner, this extension works on Chrome and Opera

   Python 218 89

6. Vulny-Code-Static-Analysis

   Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

   Python 173 81