Security Testing
Showing 36 of 143 projects
A service that provides easy-to-remember reverse shell payloads for Unix-like systems, automatically detecting available software on the target.
A Rust library for fuzzing Rust code with AFLplusplus to find security and stability issues.
A grammar-based DOM fuzzer that generates HTML, CSS, and JavaScript test cases to find security vulnerabilities in web browsers.
A comprehensive password cracking rule combining multiple sources for improved hashcat performance.
An automated framework for monitoring and tampering with system API calls of native macOS, iOS, and Android apps using Frida.
A free, cross-platform, single-file fake protocol server simulator that can start or stop multiple network services.
Statistical password cracking rules for Hashcat based on industry patterns and frequency analysis.
A lightweight, security-focused BDD test framework for Terraform that enables compliance and negative testing for infrastructure-as-code.
An AI-powered tool that analyzes source code to discover every endpoint, exposing shadow APIs and mapping the complete attack surface for security testing.
Wordlists for statistically likely usernames, optimized for horizontal password attacks and security testing.
A lightweight utility to generate malicious network traffic patterns for evaluating security controls and network visibility.
A shell script that creates a transparent proxy through the Tor network for Kali Linux, routing all system traffic anonymously.
An open-source AI testing agent that automates UI, API, security, accessibility, and visual validations using Gherkin without code.
An information security preparedness tool for adversarial simulation using Redis/Celery, Python, and Vagrant.
A framework of Python scripts for blue teams to test detection capabilities against malicious tradecraft modeled after MITRE ATT&CK.
A massive 82 billion entry wordlist compiled from multiple password dictionaries for security testing.
A curated list of awesome fuzzing resources, tools, and academic papers for software security testing.
A ruggedization framework for security testing that is usable by developers, operations, and security teams.
A friendly automotive security exploration tool for the CAN bus, enabling zero-knowledge discovery of services and vulnerabilities.
A mutation-based coverage-guided fuzzer that increases branch coverage by solving path constraints without symbolic execution.
A vulnerable Android CTF application demonstrating real-world security vulnerabilities and exploitation techniques.
A comprehensive mobile application reverse engineering and analysis framework for security testing against OWASP mobile threats.
A serverless distributed hash-cracking platform built on AWS, offering pay-as-you-go GPU power with an intuitive UI.
A malicious DNS server for executing DNS rebinding attacks dynamically via domain name requests.
An advanced keyboard-walk generator for password cracking, configurable with base characters, keymaps, and routes.
A collection of PowerShell scripts for security testing, penetration testing, and general system administration tasks.
A command-line tool for security testing and offensive operations against Jenkins CI/CD servers.
A TensorFlow-based image recognition system for captchas that works without image segmentation.
A fast and flexible HTTP fuzzer for content discovery, credential bruteforcing, and security testing.
A framework for exploiting DNS rebinding vulnerabilities to bypass Same-Origin Policy and attack internal networks from browsers.
An automated API security testing tool that generates and runs fuzzing attacks based on an OpenAPI/Swagger specification.
A scriptable network authentication cracker for custom services, using Lua scripts to test credentials.
A Rust-based manually-guided fuzzing framework for Solana programs, processing up to 12,000 transactions per second.
A Python tool that automates DDoS attacks through the Tor network for security testing and education.
A Ruby library for reading, writing, and manipulating network packets at a mid-level.
A fuzzer for Linux kernel drivers that combines interface recovery via LLVM analysis with a fuzzing engine to find security vulnerabilities.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.