Git All the Payloads! A collection of web attack payloads.

Java web common vulnerabilities and security code which is base on springboot and spring security

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Advanced dork Search & Mass Exploit Scanner

massive SQL injection vulnerability scanner

SQL Vulnerability Scanner

A wiki focusing on aggregating and documenting various SQL injection methods

All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭

The hackers tool belt

A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

Google Dork List - Uncover the Hidden Gems of the Internet ( There are at least 320+ categories )

Tips on how to write exploit scripts (faster!)

Complete PHP-based Login/Registration system, Profile system, Chat room, Forum system and Blog/Polls/Event Management System.

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

A list of useful payloads for Web Application Security and Pentest/CTF

Have fun injecting SQL into a Ruby on Rails application!

Offensive tools as Dockerfiles. Lightweight & Ready to go

SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

Hacking tools