wapt

An HTTP/HTTPS intercept proxy written in Go.

A cross-platform python based utility for information gathering and penetration testing automation!

Go Web Application Penetration Test

INE/eLearnSecurity Web Application Penetration Tester (eWPTv2) Notes

Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations

INE/eLearnSecurity Certified Professional Penetration Tester (eCPPT) / PTP v2 and v3 Notes

A reinforced version of the Wavsep evaluation platform.

WebSafeHub - Vulnerable Web App

Web Application Penetration Tester (WAPT) Notes

A curated set of offensive security notes on vulnerabilities, techniques, and tools

Automated and Modular Shell Script to Automate Security Vulnerability Scans

A Burp Suite extension to help you track your assessment progress

Plesk Obsidian <=18.0.49 - Open Redirect

INE/eLearnSecurity Web Application Penetration Tester eXtreme (eWPTXv3) Notes

This is a tool used by several security researchers to find Open Redirect Bug

WordPress WPS Hide Login <1.9.1 - Information Disclosure

Apache Superset - Authentication Bypass

CVE-2020-27838 - KeyCloak - Information Exposure

SpiderFlow Crawler Platform - Remote Code Execution

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)