🔩 Like builtins, but boltons. 240+ constructs, recipes, and snippets which extend (and rely on nothing but) the Python standard library. Nothing like Michael Bolton.

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

Agent-less vulnerability scanner for Linux, FreeBSD, Container Image, Running Container, WordPress, Programming language libraries, Network devices

Create randomly insecure VMs

Vulnerability Scanner

Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results

Pythonic task management & command execution.

Legacy WebGoat 6.0 - Deliberately insecure JavaEE application

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

GRR Rapid Response: remote live forensics for incident response

分布式资产安全扫描核心管理系统(弱口令扫描，漏洞扫描)

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Will to be a niubility scan-framework

基于 AST 变换的简易 Javascript 反混淆辅助工具

An improbable web debugger through WebSockets

JavaScript Regular expressions made easy

WebGoat is a deliberately insecure application

Freeze (package) Python programs into stand-alone executables

w3af: web application attack and audit framework, the open source web vulnerability scanner.

BurpSuite using the document and some extensions

PySonar2: an advanced semantic indexer for Python

Cowrie SSH/Telnet Honeypot http://cowrie.readthedocs.io

Malspider is a web spidering framework that detects characteristics of web compromises.

Source Code Security Audit (源代码安全审计)

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

A Powerful Spider(Web Crawler) System in Python.

burp验证码识别接口调用插件

a new crawler based on python with more function including Network fingerprint search

A simple, yet elegant HTTP library.