Social Engineering Testing tool in Telegram environment for human factor and auth session leak
Easy way to automate the complex task
A docker container that integrates static analysis tools into your project
Security Research Blog
Ghost-Phish is a Bash-based tool for simulating phishing attacks, offering customizable emails, phishing sites, and real-time user tracking to help test and improve cybersecurity defenses.
SVG XSS Exploiter is a web tool built with Python and Flask that lets users inject JavaScript payloads into SVG images to simulate XSS attacks. Made for ethical hackers and security researchers, it offers a simple UI to upload and test malicious SVGs safely in a local environment. Built strictly for educational and authorized testing purposes only.
Deliberately vulnerable REST API for OWASP Top 10 (2023) security testing and learning.
AI security payloads and wordlists. Prompt injection, jailbreaks, model exploitation. The SecLists of AI. From the team behind 350+ verified vulnerabilities across the ML ecosystem.
Intentionally vulnerable static website for testing DOM-based XSS detection tools, such as Dalfox. Educational and testing use only.
Deliberately vulnerable e-commerce web application for hands-on web security testing, manual exploitation, and security scanner evaluation. Listed in OWASP VWAD.
Verified, community-maintained directory of penetration testing and security testing companies in Norway — every claim sourced
This repository contains the weekly assignments for the Codepath Web Security course.
WiFi Diagnostics & WPS Testing — WPS/A WiFi Tester is a modern Wi-Fi diagnostics and authorized WPS testing utility for scanning nearby networks, checking root and device compatibility, viewing connection details, and testing supported WPS methods on routers you own or manage.
Advanced word and password candidate-generation engine for security research, authorized testing, and controlled generation workflows.
Test for click jacking vulnerability in website.
A Python-based automated web vulnerability scanner that detects common security flaws like SQLi, XSS, LFI, and misconfigurations. It includes a GUI interface, crawler, payload engine, and PDF report generation for security testing.
Hostile attack page for testing QAMax demo crawl pipeline security
Simulates ransomware behavior via pluggable payload modules for the security-testing ecosystem
A powerful, privacy-focused web-based tool for generating and testing TOTP (Time-based One-Time Password) and HOTP (HMAC-based One-Time Password) codes. Designed for developers, security professionals, and anyone who needs to test authenticator app implementations without compromising their sensitive credentials.
To associate your repository with the security-testing topic, visit your repo's landing page and select "manage topics."