portswigger

Burp Suite Certified Practitioner Exam Study

HTTP Request Smuggling Detection Tool

Writeups for PortSwigger WebSecurity Academy

Roadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

A collection of solutions for every PortSwigger Academy Lab (in progress)

Scripts for solving WebSecurity Academy labs of PortSwigger using Python

Scripts for solving WebSecurity Academy labs of PortSwigger using Rust

A cheatsheet for common JavaScript sources and sinks that lead to potential vulnerabilities.

My notes/solutions to the problems in "The Web Application Hacker's Handbook" (https://portswigger.net/web-security/web-application-hackers-handbook)

It is a burpsuite introduction and these are 5 lab I performed in Burpsuite.

Solutions from @PortSwigger labs

Writeups for Portswigger penetration testing labs

This is my space for practicing portswigger labs and web vulnerabilities

Writeups & Walkthroughs of various CTF challenges and boxes

Burp bridge to FFUF

A blind SQL injection script that uses binary search aka bisection method to dump datas from database.

A BurpSuite extention to upload the sitemap to a notion database to organize which endpoint need to be tested.

Optimize your web vulnerability assessments with PassiveDigger, a comprehensive Burp Suite extension that specializes in passive traffic analysis. Detect potential vulnerabilities, get actionable insights, and supercharge your security audits.