bunkerity / bunkerweb

🛡️ Open-source and cloud-native Web Application Firewall (WAF)

bottlepy / bottle

bottle.py is a fast and simple micro-framework for python web-applications.

codingo / NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

owtf / owtf

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

agents-universe / agents-universe

不是问答机器人，而是能真正干活的数字分身。共享智能体，共享项目上下文，让项目所有成员一起协同工作。同时智能体会像人一样通过资料或者工作抽象和总结经验到项目上下文中

fgeek / pyfiscan

Free web-application vulnerability and version scanner

DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker