web-penetration-testing
There are 32 repositories under web-penetration-testing topic.
- FinalRecon
thewhiteh4t / FinalRecon
All In One Web Recon
Language:Python 2041 0xInfection / TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
Language:Python 1733- toxssin
t3l3machus / toxssin
An XSS exploitation command-line interface and payload generator.
Language:Python 1138 ivan-sincek / penetration-testing-cheat-sheet
Work in progress...
Language:PHP 571PHP shells that work on Linux OS, macOS, and Windows OS.
Language:PHP 421Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests.
Language:Python 214D4Vinci / Clickjacking-Tester
A python script designed to check if the website if vulnerable of clickjacking and create a poc
Language:Python 126- N-WEB
Nabil-Official / N-WEB
WEB PENETRATION TESTING TOOL 💥
Language:Python 74 OWASP based Web Application Security Testing Checklist
pentagridsec / PentagridScanController
Improve automated and semi-automated active scanning in Burp Pro
Language:Kotlin 58JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.
Language:Java 53sil3ntH4ck3r / WebVulnLab
Herramienta donde puedes practicar las vulnerabilidades web más conocidas
Language:PHP 52shadforth / pentesterlab-bootcamp
My notes on PentesterLab's Bootcamp series 🕵️
Language:Python 42an4kein / _sql_injections
Hello my friends, it is my repo about sql injections. Call me in Telegram: @anakein
Simple API for storing all incoming XSS requests.
Language:HTML 29- white-dav
WH1T3-E4GL3 / white-dav
This is a website penetration testing tool for testing webdav server vulnerabilities.
Language:Python 20 Search Google Dorks like Chad. / Social media takeover tool.
Language:Python 19MrPr0fessor / Google-Dorks-for-Cross-site-Scripting-XSS
Cross-Site Scripting (XSS) injects malicious scripts into trusted websites via user input. Attacker-sent scripts run in users' browsers, accessing sensitive data, cookies, and even altering HTML content. Widespread due to input validation lapses.
fxrhan / Web-Recon-Automation
A bash script to automate the necessary Reconnaissance task for websites.
Language:Shell 15Malwareman007 / Hacking_Tools
All Type Of Tools written in multipule language .
Language:Python 15Web crawler and downloader based on GNU Wget.
Language:Shell 13thenurhabib / maincoon
MainCoon is an automated recon framework meant for gathering information during penetration testing of web applications.
Language:Python 11This is a list contains 7000+ Cross Site Scripting Payloads.
Brute force a JWT token. Script uses multithreading.
Language:Python 10Response Overview Extension for BurpSuite
Language:Kotlin 10meuzgebre / linux-cheatsheet
This checklist provides a comprehensive guide for conducting a website pentest.
TorhamDev / Death-engine
A powerful recon tool
Language:Python 9Brute force subdomains in multiple smaller iterations. Based on DNSRecon.
Language:Shell 8Burp Suite extensions if you want to teach Burp a new Transport-Encoding
Language:Python 8LighTend3r / generate-file-upload
Generate some payload to bypass restriction when you perform a file upload
Language:Python 6purvasingh96 / GHCI-2019
:neckbeard: This repository contains slides and notes from my workshop at the Grace Hopper Conference, India (2019).
c0brabaghdad1 / cve_Directory
This script take a URL or list of subdomain and the required DIR for specific CVE and give the response code for each url
Language:Perl 5x86xFX / CORS_exploiter
This tool build for test Cross Origin Sharing vulnerabilities
Language:Java 5Web crawler and scraper based on Scrapy and Playwright's headless browser.
Language:Python 4n0mi1k / cacheblaster
A python tool to test for web cache poisoning denial of service (CPDoS) vulnerabilities.
Language:Python 4
