Repository navigation
web-application-security
- Website
- Wikipedia
Automated NoSQL database enumeration and web application exploitation tool.
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
The Offensive Manual Web Application Penetration Testing Framework.
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
🎯 XML External Entity (XXE) Injection Payload List
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
List of CyberSecurity Resources and some different Sub-Domains of CyberSecurity
A cross-platform python based utility for information gathering and penetration testing automation!
h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
Second-order subdomain takeover scanner
A Security Tool for Enumerating WebSockets
✂️ Removing CDN IPs from the list of IP addresses
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
Master cybersecurity skills with this TryHackMe free path, includes a collection of my write-ups, solutions and progress tracking.
Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist