Popular repositories Loading

1. wafprobe wafprobe Public

   Find out which part of your client gets you 403'd. wafprobe changes one fingerprint signal per request and tells you what the WAF actually checks. 27 vendors, interactive UI.

   Go 4 1

2. authmap authmap Public

   Map authentication flows and find security misconfigs. SQLi auth bypass, XSS reflection, CSRF, CORS, rate limiting, security headers. Zero dependencies

   Python 1 1

3. apkxray apkxray Public

   X-ray Android APKs for secrets, permissions, endpoints, and security misconfigs. One command, zero external deps (no jadx, no apktool). CI-friendly JSON + Markdown reports.

   Python 1

4. akamaixray akamaixray Public

   Passive identification of Akamai Bot Manager (v2/v3) on a target, plus a defender's reference for its cookies, headers, and v3 sensor_data fields.

   Go 1

5. bundlexray bundlexray Public

   See what your shipped JavaScript gives away: leaked secrets, the endpoints your front end calls, and source maps that hand over your original code.

   Go 1 1

6. tlsprint tlsprint Public

   See what your TLS fingerprint looks like to antibot systems. JA3/JA4 analysis with risk scoring. Zero dependencies

   Python