Resources
WebHackersWeapons
hahwul/WebHackersWeapons
WebHackersWeapons is a curated awesome-list of tools used by web security researchers and bug hunters. It catalogs scanners, proxies, recon utilities, bookmarklets and extensions by type, with links and language tags.
Topics
Related projects
MobileHackersWeapons1.3kMobileHackersWeapons is a curated awesome-list of tools used by mobile security researchers, organized by platform and purpose across iOS and Android.- DevSecOps2.2kDevSecOps is a curated roadmap and resource collection that organizes tools, articles and guidance across the design, develop, build, test, deploy and operate phases.
reconftw8.4kAn automated reconnaissance tool for security researchers that chains subdomain enumeration, vulnerability scanning, OSINT, port scanning, and fuzzing into one workflow.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.
AppInfoScanner3.6kAn information-gathering scanner for red teams and pentesters that extracts URLs, IPs, credentials and sensitive data from Android, iOS and web assets.- burp-ai-agent1.6kCustom AI Agent is a Burp Suite extension that brings AI-assisted analysis and passive/active vulnerability scanning into security workflows, with multi-model backends and MCP tooling for external AI clients.