web-application-security

There are 20 repositories under web-application-security topic.

codingo / NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
nosql nosql-databases penetration-testing scanner security-audit security-tools security-toolset offensive-security enumeration databases mongodb couchdb web-application-security bugbounty redis mongodb-database sql-injection hacking hacking-tool hacktoberfest
Language:Python 2759
owtf / owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
security owasp owtf python pentest kali-linux framework web-application-security
Language:Python 1764
0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
web-penetration-testing reconnaissance vulnerability-analysis scanning-enumeration web-fuzzer osint vulnerability-detection footprinting intelligence-gathering exploitation web-application-security tidos-framework enumeration
Language:Python 1732
wallarm / gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
owasp api-security security bugbounty security-tools waf web-application-security web-application-firewall security-testing graphql-security grpc-security rest-security
Language:Go 1409
codingo / VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
security-audit penetration-testing penetration-test virtual-hosts web-application-security discovery-service hacking hacking-tool virtual-host vhost vhosts security-tools security hackthebox oscp ctf-tools offensive-security bugbounty reverse-lookups scanner
Language:Python 1159
Janusec / janusec
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
waf web-application-firewall application-gateway load-balance gateway application-security golang security web-application-security sql-injection janusec-application-gateway web-ssh janusec port-forwarding acme k8s-ingress-controller cookie-banner gslb cookie-compliance
Language:Go 1105
payloadbox / xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
xxe xxe-injection xxe-payloads xxe-example xml websecurity websecurity-reference infosec bugbounty bug-bounty web-application-security cybersecurity cyber-security information-security xml-entity payload xxe-payload xxe-payload-list payloads hacking
1019
api-firewall
wallarm / api-firewall
Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.
proxy firewall waf api-gateway apigateway api-wrapper security-tools security api-security api api-firewall openapi-specification openapi swagger openapi-security rest-security api-waf web-application-security web-application-firewall openapi-spec
Language:Go 533
payloadbox / rfi-lfi-payload-list
🎯 RFI/LFI Payload List
rfi lfi rfi-exploiton lfi-exploitation lfi-vulnerability rfi-vulnerabillity websecurity appsec application-security web-application-security payload payloads payload-list bugbounty bug-bounty security security-research security-researcher security-researchers web-hacking
504
Anon-Exploiter / SiteBroker
A cross-platform python based utility for information gathering and penetration testing automation!
python penetration-testing web-application-security cross-platform-python penetration-automation information-gathering docker-image wapt
Language:Python 415
gildasio / h2t
h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
security web-application-security defense hardening http headers
Language:Python 386
mhmdiaa / second-order
Second-order subdomain takeover scanner
security security-tools wordlist wordlist-generator penetration-testing pentesting infosec recon reconnaissance mapping web-application-security penetration-testing-tools crawler crawling
Language:Go 359
security-checklist / php-security-check-list
PHP Security Check List [ EN ] 🌋 ☣️
php php-library php-framework security security-audit checklist security-checklist php-security php-security-checker webapplication web-application-security bugbounty security-research security-researcher web-application web-application-framework security-testing
292
PalindromeLabs / STEWS
A Security Tool for Enumerating WebSockets
security websocket websockets penetration-testing web-application-security penetration-testing-tools websocket-security websockets-security
Language:Python 291
cut-cdn
ImAyrix / cut-cdn
✂️ Removing CDN IPs from the list of IP addresses
bugbounty bugbounty-tool cdn golang penetration-testing pentest recon reconnaissance web-application web-application-security
Language:Go 261
cyb3rzest / Burp-Suite-Pro
A bash and powershell script to download the latest version of Burp-Suite Professional and use it for free.
burpsuite penetration-testing burpsuite-cracked burpsuite-pro burploader hacking-tools java kali-linux kali-scripts kali-tools pentest-scripts pentest-tool pentesting pentesting-tools security-tools web-application web-application-security
Language:PowerShell 255
PalindromeLabs / awesome-websocket-security
Awesome information for WebSockets security research
security websocket websockets security-tools websocket-security websockets-security web-application-security
237
go-agent
sqreen / go-agent
Sqreen's Application Security Management for the Go language
security golang web-application-security microservices-security sqreen owasp rasp waf security-agent scans agent protection attacks instrumentation
Language:Go 202
codingo / crithit
Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
bugbounty enumeration hacking hacking-tool infosec offensive-security penetration-testing pentest-tools pentesting security security-audit security-tools security-vulnerability web-application-security
Language:Makefile 201
tprynn / web-methodology
Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
web security web-application web-application-security application-security appsec security-testing documentation
200
migueltc13 / TryHackMe
Master cybersecurity skills with this TryHackMe free path, includes a collection of my write-ups, solutions and progress tracking.
cryptography ctf-challenges injection-attacks linux-privilege-escalation penetration-testing web-application-security metasploit-and-exploitation network-scanning-and-enumeration owasp-top-10-vulnerabilities password-cracking-and-hash-cracking osint tryhackme tryhackme-writeups ctf ctf-tools exploitation hacking collaborate learn
Language:Shell 189
Mehdi0x90 / Web_Hacking
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
api-pentest bugbounty hacking payloads penetration-testing recon web-application-security webhacking websecurity bypass cheatsheet pentest security vulnerability exploit api-security bug-bounty-hunters owasp enumeration redteam
186
ImAyrix / fallparams
Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist
bug-bounty-hunters bugbounty penetration-testing pentest ssrf web-application-security web-security wordlist wordlist-generator xss
Language:Go 150
mhmdiaa / chronos
Extract pieces of info from a web page's Wayback Machine history
security recon reconnaissance wayback-machine wordlist wordlists wordlist-generator mapping web-application-security pentesting penetration-testing penetration-testing-tools infosec security-tools
Language:Go 127
SuperLibrary
MrM8BRH / SuperLibrary
Information Security Library
cybersecurity infosec network-security reverse-engineering malware-analysis digital-forensics web-application-security offensive-security ec-council sans isc2 comptia books hacking kali-linux pentesting bugbounty superlibrary security courses
107
WebSecProbe
spyboy-productions / WebSecProbe
Bypass 403
bypass-403 header-injection historical-analysis threat-detection url-manipulation vulnerability-assessment web-application-security http-request-analysis payload-variations security-assessment-tool wayback-machine-integration web-security-audit web-vulnerability-detection access-403
Language:Jupyter Notebook 102
VainlyStrain / Vaile
Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)
vulnerability-analysis reconnaissance web-application-security scanner osint enumeration exploitation-framework pentesting pentest-tool python3 exploitation scanning webappsec tidos-framework vulnerability-scanners penetration-testing-framework web-pentest information-disclosure
Language:Python 65
oshp / headers
An application to catch, search and analyze HTTP secure headers.
owasp security python defense web-application-security
Language:Python 62
lazyGrandma
AhmedConstant / lazyGrandma
a shell script aim to automatically launch 50+ online web scanning tools in the Browsaer against a target domain in a 10 waves
sell bash information-gathering reconnaissance bug-hunting subdomain-enumeration google-dorks github-dorks http-headers web-application-security web-application-security-scanner
Language:Shell 61
vatsalgupta67 / All-In-One-CyberSecurity-Resources
List of CyberSecurity Resources and some different Sub-Domains of CyberSecurity
cybersecurity collections ics infosec learning penetration-testing redteaming resources scada web-application-security awesome awesome-list binary-exploitation exploit-development hacking prerequisites
52
0xM5awy / WebApplicationSecurityWithPHP
This project is a personal learning, so you will find errors or disorganization, so if you find anything wrong, please let me know :)
php web-application-security web-security webapplication web-application-security-with-php php-security
Language:PHP 47
xforwardy
roottusk / xforwardy
Host Header Injection Scanner
bug-bounty hacking hacktoberfest hacktoberfest2020 host-header-injection host-header-manipulation security-tools vulnerability-scanner web-application-security
Language:Python 45
kljunowsky / CVE-2023-36845
Juniper Firewalls CVE-2023-36845 - RCE
bug-bounty-hunting bugbounty bugbountytips bugbountytricks cve-2023-36845 cybersecurity hacking poc proof-of-concept rce remote-code-execution remote-command-execution security web-application-security juniper juniper-networks juniper-srx juniper-firewall
Language:Python 43
vs4vijay / MultiScanner
Security Tool which scans a target using OpenVAS, Zap, and Nexpose. And consolidates the scan result.
security-tools security-audit security-scanner security-vulnerability security-testing openvas openvas-cli openvas-reports nexpose cli application-security web-application-security zap owasp owasp-zap owasp-top
Language:Python 42
kitabisa / teler-proxy
🔐 teler Proxy enabling seamless integration with teler WAF 🛡️ to protect locally running web service against a web-based attacks. 🥷
firewall intrusion-detection intrusion-prevention proxy-server reverse-proxy secure-by-default teler teler-waf tunnel-server waf web-application-firewall web-application-security teler-proxy
Language:Go 37
bkimminich / webappsec-nutshell
An ultra-compact intro (or refresher) to Web Application Security.
owasp application-security web-application-security security security-awareness training-materials
Language:JavaScript 31