web-hacking

There are 85 repositories under web-hacking topic.

sundowndev / hacker-roadmap
A collection of hacking tools, resources and references to practice ethical hacking.
hacking hacking-tool penetration-testing roadmap frameworks hacktools pentest web-hacking exploitation post-exploitation information-gathering pentesting security
12958
Manisso / fsociety
fsociety Hacking Tools Pack – A Penetration Testing Framework
fsociety exploitation port-scanning fsociety-hacking post-exploitation web-hacking python information-gathering finder desktop penetration-testing-framework network brute-force-attacks
Language:Python 10323
infoslack / awesome-web-hacking
A list of web application security
penetration-testing web-hacking vulnerabilities scanner hacking hacking-tools metasploit web-security appsec owasp pentesting security vulnerability
5619
urbanadventurer / WhatWeb
Next generation web scanner
application-security appsec hacking hacking-tools kali-linux network-security owasp penetration-test penetration-testing penetration-testing-tools pentest pentesting pentesting-tools recon ruby scanner security security-tools web web-hacking
Language:Ruby 5340
LyleMi / Learn-Web-Hacking
Study Notes For Web Hacking / Web安全学习笔记
hacking penetration-testing pentesting security study-notes web-hacking
Language:Python 4395
kelvinBen / AppInfoScanner
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
android apk apk-dex hacking hacking-tool ipa network-security penetration-test penetration-testing-tools python3 scanner security security-tools tools web-hacking
Language:Python 3051
AllHackingTools
mishakorzik / AllHackingTools
All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.
all-in-one bruteforce cibersecurity ctf-tools ddos-attacks hacking hacking-tool packages password-attack penetration-testing programming sms-bomber termux termux-hacking termux-tool tools web-hacking wireless-attacks xss-attacks xss-detection
Language:Shell 2892
husnainfareed / awesome-ethical-hacking-resources
😎 🔗 Awesome list about all kinds of resources for learning Ethical Hacking and Penetration Testing.
awesome awesome-list hacking hacktoberfest learning-hacking penetration-testing resources vulnerable-applications web-hacking
2364
phpsploit
nil0x42 / phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
post-exploitation hacking backdoor stealth hacktool blackhat privilege-escalation php-backdoor hacking-framework webshell advanced-persistent-threat redteam c2 command-and-control php-webshell php-webshell-backdoor persistence web-hacking
Language:Python 2171
koutto / jok3r
Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework
automation automation-framework docker exploiting-vulnerabilities framework hacking hacking-tool network pentest scan-tool scanner security security-audit security-tools toolbox toolbox-management vulnerability-scanners web-hacking
Language:HTML 1014
DARKARMY
D4RK-4RMY / DARKARMY
DARKARMY Hacking Tools Pack - A Penetration Testing Framework .
darkarmy pentesting hacking-tools hacking information-gathering network penetration-testing-framework portscanning exploitation desktop web-hacking 1ucif3r mrrobot termux kali-linux linux kali hacking-tool termux-hacking hacking-framework
Language:Python 830
r3curs1v3-pr0xy / vajra
Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.
bug-bounty hacking information-gathering osint pentest-tool pentesting recon scanner vajra web-hacking
Language:JavaScript 688
backdoorhub / shell-backdoor-list
🎯 PHP / ASP - Shell Backdoor List 🎯
shell backdoor shell-backdoor web-shell hacking hackingcode web-hacking r57 c99 b374k kacak web hack websecurity web-security wso php php-backdoor asp-net asp-backdoor
Language:PHP 687
payloadbox / rfi-lfi-payload-list
🎯 RFI/LFI Payload List
application-security appsec bug-bounty bugbounty lfi lfi-exploitation lfi-vulnerability payload payload-list payloads rfi rfi-exploiton rfi-vulnerabillity security security-research security-researcher security-researchers web-application-security web-hacking websecurity
516
FSecureLABS / dref
DNS Rebinding Exploitation Framework
dns-rebinding red-team hacking web-hacking browser-hacking pentesting iot iot-security iot-security-testing
Language:JavaScript 480
D4Vinci / PasteJacker
Hacking systems with the automation of PasteJacking attacks.
msfvenom liner metasploit-web-delivery linux hacking-tool social-engineering-attacks pastejacking metasploit windows-hacking web-hacking
Language:Python 379
americo / sqlifinder
SQL Injection Vulnerability Scanner made with Python
sql sql-injection sql-injection-attacks web-hacking security scanner hacking vulnerability
Language:Python 318
koutto / web-brutator
Fast Modular Web Interfaces Bruteforcer
pentest pentesting web-hacking hacking hacking-tool bruteforce brute-force bruteforce-attacks application-servers cms
Language:Python 213
awesome-cybersec
theredditbandit / awesome-cybersec
A collection of awesome platforms, blogs, documents, books, resources and cool stuff about security
hacking web-hacking bug-bounties bug-hunters bounty-hunters bugbounty ctf owasp penetration-testing
175
hueristiq / web-hacking-toolkit
A web hacking toolkit (docker image).
web-security web-hacking web-hacking-toolkit docker docker-images docker-image dockerhub bug-bounty pentesting hacking penetration-testing nmap bugbounty osint recon reconnaissance hacker-tools bugbounty-tool web-hacking-tool
Language:Makefile 159
security-prince / Resources-for-Application-Security
Some good resources for getting started with application security
appsec appsec-tutorials websecurity websecurity-reference websec infosec infosec-reference owasp application-security web-hacking php-security ctf security-engineering
131
white-deface
WH1T3-E4GL3 / white-deface
This is a simple python tool to automatically deface webdav vulnerable websites.
deface deface-tools deface-website defacement defacer hacking termux-tool web-deface web-hacking website-deface website-deface-tool website-defacement website-hack website-hacking white-deface
Language:Python 127
serain / netmap.js
Fast browser-based network discovery module
hacking pentesting browser-hacking red-team web-hacking
Language:JavaScript 114
domssilva / vulnsearch
A deep look at some recon methodologies and web-application vulnerabilities of my interest where I will merge all my notes gathered from books, videos, articles and own experience with bug bounty hunting / web and network hacking
web security ethical-hacking web-hacking bug-bounty bugbounty
Language:JavaScript 103
kostas-pa / LFITester
LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.
python lfi-detection pentest-tool exploitation cybersecurity penetration-testing-tools lfi-exploitation lfi-vulnerability crawler hacking lfi bugbounty enumeration fuzzing web-hacking webhacking penetration-testing pentesting
Language:Python 96
CRO-THEHACKER / v1ew-s0urce
v1ew-s0urce a recon tool built by the 5/9Dark team.
hacking networking network-tools python python3 desktop penetration-testing pentesting fsociety-hacking mrrobot ports-scan exploitation web-hacking discord information-gathering
Language:Python 89
latestalexey / awesome-web-hacking
A list of web application security
hacking hacking-tools metasploit penetration-testing scanner vulnerabilities web-hacking web-security
89
k0r0pt / Project-Tauro
A Router WiFi key recovery/cracking tool with a twist.
wireless-security wireless-hacking wifi-security wifi-settings wifi-hacking router-hacking router-exploitation-framework web-scraper web-scraping web-security web-scanner router-scraper k0r0pt hacking hacking-tool network-security network-scanner web-hacking
Language:Java 86
MoisesTapia / TWAPT
Deploy your own lab of web application penetration testing with docker and docker-compose, webgoat, dvwap, bwapp and Juice Shop
docker-compose docker web web-hacking pentesting hacking hacking-tools oscp webapp hacking-tool web-hackathon penetration-testing railsgoat webgoat bwapp juice-shop
67
nuts7 / CVE-2023-27372
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
cve deserialization exploit nuclei nuclei-templates php poc rce remote-code-execution spip vulnerability web-hacking cve-2023-27372 cve2023
Language:Python 61
xadhrit / xira
xss vulnerability scanner and input fuzzing tool.
pentesting-tools web-hacking cross-site-scripting vulnerability-scanners python3
Language:Python 61
naimkowshik / LBFH
About All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
address-wlan0 nmap-cmd discovery ip-mac-mask-broadcas nmap-port os-detection password hash-identifier web-hacking xss-toolkit exploitation sqlmap fsociety commix bettercap open-sources
Language:Python 58
xu-xiang / awesome-security-vul-llm
本项目通过大模型联动爬虫，检索Github上所有存有有价值漏洞信息与漏洞POC或规则信息的项目，并自动识别项目的目录结构、Readme信息后进行总结分析并分类，所汇总的项目可以帮助安全行业从业者收集漏洞信息、POC信息、规则等。
appsec awesome awesome-list exp hacking hacking-tools langchain llm llm-agent metasploit owasp penetration-testing pentesting poc scanner security vulnerabilities vulnerability web-hacking web-security
56
Reven8e / multitool
Simple Penetration Testing Multitool For Beginners.
hacking-tool ethical-hacking hacking python-hacking python3 multitool python-scripting python-script pentesting pentesting-tools python-pentest python-beginners web-hacking port-scanner network network-tools
Language:Python 55
AbirHasan2005 / fsociety
Fssociety Hacking Tools Pack. A Penetration Testing Framework, you will have every script that a hacker needs. This is a top hidden tool modified by AbirHasan2005. Don't share much.
fsociety web-hacking exploitation
Language:Python 38
h4ck
fagci / h4ck
Hacking tools. IP fortune, webmap -- web vulns scanner, rtsp brute+fuzz, and more.
h4ck fuzz brute-force hacking-tools rtsp web-hacking webmap fortune-rtsp
Language:Python 37

web-hacking

sundowndev / hacker-roadmap

Manisso / fsociety

infoslack / awesome-web-hacking

urbanadventurer / WhatWeb

LyleMi / Learn-Web-Hacking

kelvinBen / AppInfoScanner

mishakorzik / AllHackingTools

husnainfareed / awesome-ethical-hacking-resources

nil0x42 / phpsploit

koutto / jok3r

D4RK-4RMY / DARKARMY

r3curs1v3-pr0xy / vajra

backdoorhub / shell-backdoor-list

payloadbox / rfi-lfi-payload-list

FSecureLABS / dref

D4Vinci / PasteJacker

americo / sqlifinder

koutto / web-brutator

theredditbandit / awesome-cybersec

hueristiq / web-hacking-toolkit

security-prince / Resources-for-Application-Security

WH1T3-E4GL3 / white-deface

serain / netmap.js

domssilva / vulnsearch

kostas-pa / LFITester

CRO-THEHACKER / v1ew-s0urce

latestalexey / awesome-web-hacking

k0r0pt / Project-Tauro

MoisesTapia / TWAPT

nuts7 / CVE-2023-27372

xadhrit / xira

naimkowshik / LBFH

xu-xiang / awesome-security-vul-llm

Reven8e / multitool

AbirHasan2005 / fsociety

fagci / h4ck