Tag

A comprehensive community-developed list of common software and hardware weaknesses to help identify and mitigate security issues.

Commix is an open-source penetration testing tool for detecting and exploiting command injection vulnerabilities in web applications.

CyberChef is a web app for encryption, encoding, compression, and data analysis, offering a wide range of operations in a drag-and-drop interface.

Dalfox is a powerful open-source XSS scanner and utility focused on automation, designed for detecting and verifying XSS vulnerabilities.

EC-Council offers cybersecurity courses online, providing industry-recognized certifications and training for career advancement.

AI-native SAST tool for code security, detecting vulnerabilities, secrets, IaC issues, and AI model security with actionable AI fixes.

EvilWAF is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

Feroxbuster is a fast, simple, recursive content discovery tool written in Rust, designed for forced browsing.

Ghauri is a cross-platform tool for detecting and exploiting SQL injection flaws, automating the process for security professionals.

Gobuster is a tool to brute-force URIs, DNS subdomains, and virtual hostnames, aiding in web application reconnaissance.

Intelligence X is a search engine and data archive for searching Tor, I2P, data leaks, and the public web by email, domain, IP, and more.

Interactsh is a tool and service for capturing and handling out-of-band interactions during security testing.