Tools
Fenjing
Marven11/Fenjing
Fenjing is an automated Jinja2 SSTI exploitation tool for CTF challenges that analyzes WAF filtering and generates bypass payloads to attack forms and API endpoints.
Topics
Related projects
mitmproxy46.9kAn interactive TLS-capable intercepting HTTP proxy with console, command-line, and web interfaces, used by pentesters and developers for debugging and security testing.
SafeLine23.3kA self-hosted web application firewall and reverse proxy that protects websites from injections, XSS, bots, and abuse.
fail2ban19kA daemon that scans log files for repeated authentication failures and bans offending hosts by updating system firewall rules.
crowdsec15.6kCrowdSec is an open-source IDS/IPS, WAF and bot-detection engine. It analyzes logs and HTTP requests, triggers remediation through firewall and proxy components, and shares a crowdsourced blocklist of malicious IPs so one attack protects the whole community.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
wifiphisher15kWifiphisher is a rogue access point framework for red team engagements and Wi-Fi security testing. It performs Evil Twin, KARMA and known-beacon association attacks, then serves customizable phishing pages to capture credentials under controlled, authorized testing.