wapt

An HTTP/HTTPS intercept proxy written in Go.

A cross-platform python based utility for information gathering and penetration testing automation!

Go Web Application Penetration Test

INE/eLearnSecurity Web Application Penetration Tester (eWPTv2) Notes

Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations

INE/eLearnSecurity Certified Professional Penetration Tester (eCPPT) / PTP v2 and v3 Notes

Web Application Penetration Tester (WAPT) Notes

INE/eLearnSecurity Web Application Penetration Tester eXtreme (eWPTXv3) Notes

WebSafeHub - Vulnerable Web App

A reinforced version of the Wavsep evaluation platform.

A curated set of offensive security notes on vulnerabilities, techniques, and tools

Automated and Modular Shell Script to Automate Security Vulnerability Scans

A Burp Suite extension to help you track your assessment progress

This is a tool used by several security researchers to find Open Redirect Bug

🛡️ Web Penetration Testing is the process of testing websites or web apps for security flaws. 🔍 It helps find vulnerabilities like SQL injection, XSS, and authentication bypass. 🚨 Used to protect data, improve security, and prevent hacking attacks.

WordPress WPS Hide Login <1.9.1 - Information Disclosure

Apache Superset - Authentication Bypass

Plesk Obsidian <=18.0.49 - Open Redirect

CVE-2020-27838 - KeyCloak - Information Exposure

SpiderFlow Crawler Platform - Remote Code Execution