An Advanced Web Application Firewall that protects against threats like SQL injection and XSS by fil…

Browser Exploitation Framework. Hooks web browsers via JavaScript and provides extensive command mod…

Lightweight program to find all known misconfigurations in CORS (Cross-Origin Resource Sharing) impl…

Takes screenshots of web pages, RDP, and VNC services. Reports on default credentials and interestin…

OWASP's Zed Attack Proxy — one of the world's most popular free web application security scanners. F…

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetS…