A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.
#security-testing tools
183 results · page 2
An API security platform that combines discovery, compliance monitoring, and protection capabilities to defend against API attacks, automated threats, and data exposure.
Chameleon aids in evading proxy categorization to bypass internet filters.
Checkmarx One SAST is a static application security testing tool that combines speed and security to improve developer experience.
CHIPSEC is a framework for analyzing the security of PC platforms and components, with tools for low-level interfaces and forensic capabilities.
Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
Open source penetration testing tool for detecting and exploiting command injection vulnerabilities.
A collection of real-world scenarios to evaluate command injection detection and exploitation abilities
An Application Security Posture Management platform that helps organizations integrate security throughout the software development lifecycle with a focus on vulnerability management and se…
A tool for finding AWS credentials in files, optimized for Jenkins integration.
Command line tool for testing CRLF injection on a list of domains.
A browser with XSS detection capabilities
A deliberately weak and insecure implementation of GraphQL for testing and practicing GraphQL security
Linux-based operating system intentionally vulnerable for cybersecurity practice.
A live archive of DEF CON CTF challenges, vulnerable by design, for hackers to play safely.
DET (extensible) Data Exfiltration Toolkit is a proof of concept tool for performing Data Exfiltration using multiple channels simultaneously.
A proof-of-concept for an adaptive parallelised DNS prober
DNS spoofer tool for redirecting DNS lookup requests.
A small script to check a list of domains against open redirect vulnerability
Python utility for testing the existence of domain names under different TLDs to find malicious subdomains.
A free online tool to scan for DOM-based XSS vulnerabilities in HTML, JavaScript, and CSS files.
A security testing framework for Android with tools to search for vulnerabilities and interact with the Android Runtime.
A Docker container that starts a SSH honeypot and reports statistics to the SANS ISC DShield project
A simple honeypot that opens a listening socket and waits for connection attempts, with configurable reply and event handling
Load more tools
Showing 48 of 183