Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more
Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.
Burp Suite Certified Practitioner Exam Study
Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration,…
Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the activ…
Latest BurpSuitePro is a script for installing and updating Burp Suite Professional on Linux and Windows, ensuring Java compatibility for sm…
Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites
Caddy WAF (Regex Rules, IP and DNS filtering, Rate Limiting, GeoIP, Tor, Anomaly Detection)
🚀 Caido releases, wiki and roadmap Modern web security auditing tool built as a Rust-based alternative to Burp Suite. Features a clean UI…
[scanner] [TcpListener] [FileMiner] [Subscrabber]…
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating …
CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tool…
The Cyclops's binary code can be directly downloaded here; It's source code is not provided now.
Wayback Machine OSINT Framework
承影，愿你在光影之间，找到属于自己的锋芒。开源的类 BurpSuite 应用 ChYing — may you find your own edge between light and shadow. An open-source, BurpSuite-like applicat…
Ansible Role to Automate CIS v1.1.0 Ubuntu Linux 18.04 LTS, 20.04 LTS Remediation
Obtain GraphQL API schema even if the introspection is disabled
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Co…
AI-powered cybersecurity code review skill for Claude Code. 8 specialist agents, OWASP 2025, CWE Top 25, MITRE ATT&CK, 11 languages, zero co…
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
Monitoring the Cloud Landscape
☁️ Curated Cloud OSINT resources — dorks, tools, and techniques for AWS, Azure, GCP, Oracle Cloud, and other major providers reconnaissance
Analysis of Cloudflare anti-bot cookie flow (cf_bm / cf_clearance) from a defensive perspective.
Collection of quality safety articles. Awesome articles.