Pinned Loading

1. overstep overstep Public

   Matrix-driven authorization testing for HTTP APIs — turn an authorization matrix into positive & negative tests that catch BOLA, BFLA, privilege escalation, and authorization drift in CI/CD.

   Python 1

2. HostHeaderScanner HostHeaderScanner Public

   Practical Host header attack scanner — injection, SSRF, cache poisoning, open redirect, auth bypass & vhost discovery, with raw-HTTP bypasses and OOB confirmation.

   Python 3 1

3. rcekit rcekit Public

   RCE testing toolkit for authorized security testing: generate context- and sink-aware payloads, deliver them (Burp/Nuclei export or the built-in --verify harness), and auto-confirm execution — incl…

   Python 11 2

4. sshfinder sshfinder Public

   Fast, parallel SSH discovery and security auditing across hosts and CIDR ranges: identifies SSH on any port in real time, then flags auth methods, weak crypto, Terrapin (CVE-2023-48795), and reused…

   Python 2

5. gdos gdos Public

   GraphQL DoS resilience scanner — verify your GraphQL endpoint is hardened against denial-of-service amplification attacks (depth, aliasing, batching, introspection, and more).

   Python 1