An open API service providing repository metadata for many open source software ecosystems.

GitHub topics: web-penetration-testing

ivan-sincek/auto-recon

Not another auto-reconnaissance framework.

Language: Python - Size: 93.8 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 0

ivan-sincek/penetration-testing-cheat-sheet

Work in progress...

Language: PHP - Size: 1.57 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 719 - Forks: 146

strikoder/kalipen

A one-command Kali setup for automated, up-to-date pentesting tools.

Language: Shell - Size: 65.4 KB - Last synced at: 3 days ago - Pushed at: 4 days ago - Stars: 0 - Forks: 0

pentagridsec/PentagridScanController

Improve automated and semi-automated active scanning in Burp Pro

Language: Kotlin - Size: 5.17 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 61 - Forks: 4

0xInfection/TIDoS-Framework

The Offensive Manual Web Application Penetration Testing Framework.

Language: Python - Size: 22.7 MB - Last synced at: 5 days ago - Pushed at: about 2 years ago - Stars: 1,825 - Forks: 392

ivan-sincek/chad

Search Google Dorks like Chad. / Broken link hijacking tool.

Language: Python - Size: 1020 KB - Last synced at: 6 days ago - Pushed at: 7 days ago - Stars: 28 - Forks: 5

ivan-sincek/php-reverse-shell

PHP shells that work on Linux OS, macOS, and Windows OS.

Language: PHP - Size: 462 KB - Last synced at: 8 days ago - Pushed at: over 1 year ago - Stars: 492 - Forks: 152

D4Vinci/Clickjacking-Tester

A python script designed to check if the website if vulnerable of clickjacking and create a poc

Language: Python - Size: 36.1 KB - Last synced at: 5 days ago - Pushed at: almost 5 years ago - Stars: 148 - Forks: 63

t3l3machus/toxssin

An XSS exploitation command-line interface and payload generator.

Language: Python - Size: 682 KB - Last synced at: 11 days ago - Pushed at: 5 months ago - Stars: 1,372 - Forks: 192

ivan-sincek/nagooglesearch

Not another Google searching tool.

Language: Python - Size: 9.77 KB - Last synced at: 19 days ago - Pushed at: 3 months ago - Stars: 9 - Forks: 0

thewhiteh4t/FinalRecon

All In One Web Recon

Language: Python - Size: 360 KB - Last synced at: 19 days ago - Pushed at: about 1 month ago - Stars: 2,447 - Forks: 450

whoamikiddie/vulnx-base

Vulnx is a powerful vulnerability scanning and reconnaissance tool built in Golang, designed for ethical hackers, security researchers, and penetration testers. It automates the process of collecting intelligence on targets and scanning for common vulnerabilities, combining speed, accuracy, and ease of use.

Language: HTML - Size: 267 MB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 1 - Forks: 0

L0WK3Y-IAAN/Hunting-With-L0WK3Y

This repository documents my path from cybersecurity enthusiast to a skilled bug bounty hunter. Here, I share the tools, resources, techniques, and real-world insights I've gathered along the way, aimed at uncovering vulnerabilities and improving application security.

Language: Python - Size: 27.2 MB - Last synced at: 7 days ago - Pushed at: about 1 month ago - Stars: 4 - Forks: 1

L0WK3Y-IAAN/PortSwigger-Academy-Tracker

This script dynamically tracks your PortSwigger Academy progress and generates a markdown table for you.

Language: Python - Size: 27.3 KB - Last synced at: 7 days ago - Pushed at: about 1 month ago - Stars: 0 - Forks: 1

whxitte/white-dav

This is a website penetration testing tool for testing webdav server vulnerabilities.

Language: Python - Size: 64.5 KB - Last synced at: about 1 month ago - Pushed at: 6 months ago - Stars: 37 - Forks: 7

ivan-sincek/forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

Language: Python - Size: 1000 KB - Last synced at: 17 days ago - Pushed at: 3 months ago - Stars: 242 - Forks: 43

sil3ntH4ck3r/WebVulnLab

Herramienta donde puedes practicar las vulnerabilidades web mΓ‘s conocidas. Email: [email protected]

Language: PHP - Size: 17.7 MB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 61 - Forks: 8

aaBadri/pentest

Getting started with web penetration test.

Language: PHP - Size: 177 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 1 - Forks: 0

ivan-sincek/java-reverse-tcp

JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.

Language: Java - Size: 45.9 KB - Last synced at: about 2 months ago - Pushed at: about 2 years ago - Stars: 60 - Forks: 8

ivan-sincek/file-scraper

Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.

Language: Python - Size: 907 KB - Last synced at: 21 days ago - Pushed at: 3 months ago - Stars: 13 - Forks: 2

Hunterdii/tryhackme-free-rooms

Hello, aspiring hackers! πŸ•΅οΈβ€β™‚οΈ Here’s a list of 500+ Free TryHackMe rooms to kickstart your cybersecurity journey. These rooms are absolutely free, and I’ve organized them by topic to help you dive in right away. πŸ› οΈ

Size: 40 KB - Last synced at: 2 months ago - Pushed at: 5 months ago - Stars: 62 - Forks: 16

krishealty/knockknock

A Simple Tool to gather information from any website, domain, sub-domain, DNS, links by enumeration with simple commands.

Language: Go - Size: 1.2 MB - Last synced at: 2 days ago - Pushed at: about 1 year ago - Stars: 5 - Forks: 1

ivan-sincek/bot-safe-agents

A library for fetching a list of bot-safe user agents.

Language: Python - Size: 3.91 KB - Last synced at: 8 days ago - Pushed at: 7 months ago - Stars: 4 - Forks: 0

hackerhalt0fficial/Tryhackme-Certificate

Showcasing cybersecurity projects, tools, and research in penetration testing, OSINT, and exploit development, contributing to the cybersecurity community. πŸš€

Size: 168 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

ivan-sincek/scrapy-scraper

Web crawler and scraper based on Scrapy and Playwright's headless browser.

Language: Python - Size: 86.9 KB - Last synced at: about 2 months ago - Pushed at: 3 months ago - Stars: 13 - Forks: 3

zAbuQasem/MyNotes

My notes from courses,books ..etc

Size: 67.6 MB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 44 - Forks: 5

hunThubSpace/SubScope

SubScope is a Python-based command-line tool that helps you manage domains and subdomains in workspaces using an SQLite database.

Language: Python - Size: 366 KB - Last synced at: 9 days ago - Pushed at: 4 months ago - Stars: 1 - Forks: 1

hunThubSpace/TorWatch

TorWatch is a powerful bash script for monitoring the availability of websites through the Tor network. It manages IP address rotation, blocks IP addresses if the site is inaccessible, and logs activities for tracking events.

Language: Shell - Size: 16.6 KB - Last synced at: 2 months ago - Pushed at: 4 months ago - Stars: 1 - Forks: 0

t3l3machus/OWASP-Testing-Guide-Checklist

OWASP based Web Application Security Testing Checklist

Size: 222 KB - Last synced at: 4 months ago - Pushed at: 11 months ago - Stars: 69 - Forks: 31

ivan-sincek/amounts

Generate a wordlist to fuzz amounts or any other numerical values.

Language: Python - Size: 12.7 KB - Last synced at: 16 days ago - Pushed at: 7 months ago - Stars: 9 - Forks: 3

AngixBlack/RedirXploit

tool designed to scan URLs for open redirect vulnerabilities

Language: Python - Size: 112 KB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 0 - Forks: 0

HackfutSec/ProxGrab

ProxGrab is a tool that allows you to fetch public HTTP, SOCKS4, and SOCKS5 proxies from an API, verify their validity, and save them to a file for later use. This project is primarily designed for security researchers and online anonymity professionals

Language: Python - Size: 11.7 KB - Last synced at: 8 days ago - Pushed at: 5 months ago - Stars: 1 - Forks: 0

GraveSIN/http-probe

Probe URL(s) for status codes and other info

Language: Go - Size: 31.3 KB - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 0 - Forks: 0

fxrhan/Web-Recon-Automation

A bash script to automate the necessary Reconnaissance task for websites.

Language: Shell - Size: 13.7 KB - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 16 - Forks: 2

ivan-sincek/xss-catcher

Simple API for storing all incoming XSS requests and various XSS templates.

Language: HTML - Size: 146 KB - Last synced at: 2 months ago - Pushed at: 11 months ago - Stars: 45 - Forks: 8

ivan-sincek/jwt-bf πŸ“¦

Brute force a JWT token. Script uses multithreading.

Language: Python - Size: 2.93 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 9 - Forks: 1

ivan-sincek/dnsrecon-chunked πŸ“¦

Brute force subdomains in multiple smaller iterations. Based on DNSRecon.

Language: Shell - Size: 4.88 KB - Last synced at: 3 months ago - Pushed at: about 2 years ago - Stars: 7 - Forks: 1

ivan-sincek/metagoofeel πŸ“¦

Web crawler and downloader based on GNU Wget.

Language: Shell - Size: 3.91 KB - Last synced at: 3 months ago - Pushed at: about 2 years ago - Stars: 12 - Forks: 4

ivan-sincek/css-dictionary-attack πŸ“¦

Example on how to steal information with CSS from web forms.

Language: CSS - Size: 103 KB - Last synced at: 4 months ago - Pushed at: almost 4 years ago - Stars: 2 - Forks: 3

AngixBlack/Corscan

Advanced CORS Header Checker Tool with Vulnerability Detection and Bypass Attempts

Language: Python - Size: 640 KB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 52 - Forks: 12

c0brabaghdad1/cve_Directory

This script take a URL or list of subdomain and the required DIR for specific CVE and give the response code for each url

Language: Perl - Size: 1000 Bytes - Last synced at: 5 days ago - Pushed at: about 4 years ago - Stars: 4 - Forks: 2

kmarkela/wiggumizer

Burp History analyser and Fuzzer

Language: Go - Size: 79 MB - Last synced at: 2 months ago - Pushed at: about 1 year ago - Stars: 1 - Forks: 0

shadforth/pentesterlab-bootcamp

My notes on PentesterLab's Bootcamp series πŸ•΅οΈ

Language: Python - Size: 25.4 KB - Last synced at: 6 months ago - Pushed at: over 1 year ago - Stars: 43 - Forks: 23

rahardian-dwi-saputra/webgoat

Praktek eksploitasi celah keamanan OWASP top 10 dengan WebGoat

Size: 20.3 MB - Last synced at: 12 months ago - Pushed at: 12 months ago - Stars: 0 - Forks: 0

kiro6/writeups

Language: Python - Size: 1.78 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 1

bemnet16/cyber-path

This repository is for cyber-security learning path. which contains notes, walk-through for CTF's from different platforms

Size: 1.99 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 1 - Forks: 0

TorhamDev/Death-engine

A powerful recon tool

Language: Python - Size: 271 KB - Last synced at: about 2 months ago - Pushed at: almost 3 years ago - Stars: 11 - Forks: 2

marcel-haag/security-c4po

Security-C4PO is an open-source web-application for managing and documenting penetration tests. This tool allows a security tester to keep track of the testing progress according to the OWASP Testing Guide. This application aims to make the offical Testing Guide more actionable to work with.

Language: TypeScript - Size: 9.81 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 3 - Forks: 1

pavi103/pentest-checklist

comprehensive pentesting checklist.

Size: 98.6 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 4 - Forks: 2

mbz0xc3/CyberSecurity-Tools

Cyber security related tools. Free to use and share.

Language: Python - Size: 6.84 KB - Last synced at: about 1 year ago - Pushed at: about 3 years ago - Stars: 0 - Forks: 1

x86xFX/CORS_exploiter

This tool build for test Cross Origin Sharing vulnerabilities

Language: Java - Size: 27.3 KB - Last synced at: over 1 year ago - Pushed at: almost 3 years ago - Stars: 5 - Forks: 0

Malwareman007/Hacking_Tools

All Type Of Tools written in multipule language .

Language: Python - Size: 145 KB - Last synced at: about 1 year ago - Pushed at: over 2 years ago - Stars: 15 - Forks: 5

lisus18ikrak/sitescanner

A simple and user friendly tool for information gathering and reconnaissance of a website

Language: Python - Size: 27.3 KB - Last synced at: over 1 year ago - Pushed at: over 2 years ago - Stars: 4 - Forks: 0

n0mi1k/cacheblaster

A python tool to test for web cache poisoning denial of service (CPDoS) vulnerabilities.

Language: Python - Size: 4.88 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 3 - Forks: 0

Nabil-Official/N-WEB

WEB PENETRATION TESTING TOOL πŸ’₯

Language: Python - Size: 743 KB - Last synced at: over 1 year ago - Pushed at: over 2 years ago - Stars: 67 - Forks: 31

Revc0/Educational-Java-Web-Penetration-Test

Java Web Penetration Testing Project

Language: HTML - Size: 84 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 2 - Forks: 0

an4kein/_sql_injections

Hello my friends, it is my repo about sql injections. Call me in Telegram: @anakein

Size: 249 KB - Last synced at: over 1 year ago - Pushed at: over 4 years ago - Stars: 38 - Forks: 16

LiterallyEthical/portswigger-websecurity-academy-solutions

Collection of solutions for Portswigger Websecurity Academy Labs

Size: 2.93 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 1 - Forks: 0

sufyandaredevil/EHRSRC_ZTM

Notes & misc taken from Complete Ethical Hacking Bootcamp 2021: ZTM(ARCHIVED) and EC-Council's CodeRed

Language: Python - Size: 2.88 MB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 1 - Forks: 0

pentagridsec/PentagridResponseOverview

Response Overview Extension for BurpSuite

Language: Kotlin - Size: 6.43 MB - Last synced at: over 2 years ago - Pushed at: almost 3 years ago - Stars: 10 - Forks: 5

pentagridsec/PentagridBurpTransportEncoding

Burp Suite extensions if you want to teach Burp a new Transport-Encoding

Language: Python - Size: 275 KB - Last synced at: over 2 years ago - Pushed at: about 3 years ago - Stars: 7 - Forks: 3

Saad-AHLA/DVWA_Solutions

Size: 12.3 MB - Last synced at: about 2 years ago - Pushed at: over 3 years ago - Stars: 2 - Forks: 0

fxrhan/all-XSS-Payloads

This is a list contains 7000+ Cross Site Scripting Payloads.

Size: 82 KB - Last synced at: about 2 years ago - Pushed at: over 3 years ago - Stars: 10 - Forks: 0

Drupad-DeV/indy-CTF-Writeups

Indy CTFs Walkthroughs

Size: 44.9 KB - Last synced at: almost 2 years ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

thenurhabib/maincoon

MainCoon is an automated recon framework meant for gathering information during penetration testing of web applications.

Language: Python - Size: 118 KB - Last synced at: over 2 years ago - Pushed at: over 3 years ago - Stars: 8 - Forks: 0

arzuozkan/BasicLoginPage

Login page development with Flask and pentesting for the vulnerability

Language: HTML - Size: 18.6 KB - Last synced at: over 2 years ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 0

codeswhite/Domainator

A python3 based utility for domains and websites information gathering and reconnaissance

Language: Python - Size: 23.4 KB - Last synced at: about 2 years ago - Pushed at: over 5 years ago - Stars: 0 - Forks: 2

TechUX/PyDos

Dos (Denial of Service) Attack Script in Python.Down Any WebServer in less than 𝟭.𝟯 π—¦π—²π—°π—Όπ—»π—±π˜€ .It send unlimited number of packets to every port of website to make the web server down.

Size: 2.93 KB - Last synced at: about 2 years ago - Pushed at: about 4 years ago - Stars: 1 - Forks: 1

HarshilPatel007/webappsec

web application penetration testing and security notes.

Language: Python - Size: 63.5 KB - Last synced at: over 2 years ago - Pushed at: over 3 years ago - Stars: 1 - Forks: 0

purvasingh96/Ethical-Hacking-and-Penetration-Testing

:neckbeard: This repository contains slides and notes from my workshop at the Grace Hopper Conference, India (2019).

Size: 48.6 MB - Last synced at: over 2 years ago - Pushed at: over 4 years ago - Stars: 6 - Forks: 4