almandin/fuxploider

一个想帮你总结所有类型的上传漏洞的靶场

Automatic SSTI detection tool with interactive interface

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

高危漏洞利用工具

Web application fuzzer

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Agentic offensive-security in your terminal