web-security

There are 80 repositories under web-security topic.

Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
android-security api-testing apk cwe devsecops dynamic-analysis ios-security malware-analysis mastg masvs mobile-security mobsf mstg owasp rest runtime-security static-analysis web-security windows-mobile-security
Language:JavaScript 19429
SafeLine
chaitin / SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
firewall http-flood security sql-injection waf web-application-firewall web-security xss captcha api-gateway appsec cve cybersecurity hackers vulnerability websecurity application-security bruteforce blueteam self-hosted
Language:Go 17682
Hacker0x01 / hacker101
Source code for Hacker101.com - a free online web and mobile security class.
education hacking security hackerone hacker101 xss clickjacking csrf web-security session-fixation unchecked-redirects sql-injection mobile-security vulnerability
Language:SCSS 14213
nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
bug-bounty-hunters hackers xss bug-bounty learn2hack hacking pentest web-security education ssrf bugbounty
11508
bunkerweb
bunkerity / bunkerweb
🛡️ Open-source and next-generation Web Application Firewall (WAF)
nginx modsecurity docker security dnsbl reverse-proxy bunkerized-nginx hardening web-security security-tuning cybersecurity devsecops antibot letsencrypt swarm kubernetes devops hosting waf web-application-firewall
Language:Python 9069
infoslack / awesome-web-hacking
A list of web application security
penetration-testing web-hacking vulnerabilities scanner hacking hacking-tools metasploit web-security appsec owasp pentesting security vulnerability
6411
vavkamil / awesome-bugbounty-tools
A curated list of various bug bounty tools
awesome awesome-list bugbounty security-tools tools web-security
5317
awesome-nodejs-security
lirantal / awesome-nodejs-security
Awesome Node.js Security resources
cybersecurity hacktoberfest infosec nodejs owasp pentest security vulnerabilities web-security
2802
DDoS-Ripper
palahsu / DDoS-Ripper
DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic
ddos-attacks ddos-tool ddos-attack-tools ddos-protection ddos ddos-attack-tool denial-of-service attack-defense deface-website hacking-tools hacking-tool ddos-ripper ddos-attack internet-traffic protection web-security security attack-server sql-injection linux-tools
Language:Python 2499
0xSobky / HackVault
A container repository for my public web hacks!
payloads web-security pentesting tracking fuzzing regex reconnaissance xss exploit
Language:JavaScript 2010
qi4L / JYso
JNDIExploit or a ysoserial.
attack gadget java jndi jndi-injection ldap mem-shell middleware-echo rmi web-security ysoserial
Language:Java 1570
WangYihang / GitHacker
🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.
git githack web-security
Language:Python 1505
lunasec-io / lunasec
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
compliance continuous-delivery cve-scanning cybersecurity dependency-analysis devsecops gdpr log4shell pci-dss sbom sbom-generator scanning scanning-tool security security-tools soc2 software-composition-analysis tokenization web-security zero-trust
Language:TypeScript 1456
Ge0rg3 / requests-ip-rotator
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
security-tools security ip bypass networking aws apigateway bugbounty web-security hacktoberfest
Language:Python 1420
pushsecurity / saas-attacks
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
offensive-security saas web-security
1375
4ra1n / super-xray
Web漏洞扫描工具XRAY的GUI启动器
vulnerability-scanners web-security
Language:Java 1305
cherrybomb
blst-security / cherrybomb
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.
api api-security best-practices blst business-logic cli cyber cybersecurity firecracker http open-source openapi openapi3 security security-tools web-sec-scanner web-security websecurity
Language:Rust 1178
devanshbatham / FavFreak
Making Favicon.ico based Recon Great again !
bugbounty bughunting hacking information-gathering osint recon reconnaissance web-security webappsec
Language:Python 1177
chenjj / CORScanner
🎯 Fast CORS misconfiguration vulnerabilities scanner
cors cors-misconfigurations cors-policy cors-scanner python python3 vulnerability-scanners web-security
Language:Python 1074
Zeyad-Azima / Offensive-Resources
A Huge Learning Resources with Labs For Offensive Security Players
api infrastructure learning security mobile web hack hacking owasp cybersecurity web-security mobile-security offensive offensive-security red-team owasp-top-10 redteam cloud-security api-security red-teaming
987
TypeError / secure
Lightweight modern Python library to add security headers (CSP, HSTS, etc.) to Django, Flask, FastAPI, and more. Secure defaults or fully customizable.
content-security-policy django fastapi flask headers headers-security http-headers python python-security referrer-policy secure-headers security security-headers strict-transport-security web-security
Language:Python 930
backdoorhub / shell-backdoor-list
🎯 PHP / ASP - Shell Backdoor List 🎯
shell backdoor shell-backdoor web-shell hacking hackingcode web-hacking r57 c99 b374k kacak web hack websecurity web-security wso php php-backdoor asp-net asp-backdoor
Language:PHP 768
4ra1n / mysql-fake-server
纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY 的利用
jdbc mysql fake-server vulnerability web-security
Language:Java 741
incredibleindishell / SSRF_Vulnerable_Lab
This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
attack exploitation hacking lab server-side-request-forgery ssrf web-security
Language:PHP 710
Lookyloo / lookyloo
Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.
information-security privacy web-security dfir capture scraping lookyloo
Language:Python 706
tempesta-tech / tempesta
Web application acceleration, advanced DDoS protection and web security
web-application-firewall linux-kernel high-performance http-accelerator load-balancer database tls http2 security bots ddos-protection web-performance web-security ddos waf
Language:C 666
turbo / openftp4
A list of all FTP servers in IPv4 that allow anonymous logins.
ftp web-security
654
Raven-Storm
Tmpertor / Raven-Storm
Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.
denial-of-service protection security security-tools web-security ddos-attacks dos attacks stress-testing ddos-script server ddos-tool pentesting python penetration-tests ddos-attack-tools termux botnet mitm ddos
Language:Python 637
hueristiq / xurlfind3r
A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.
osint penetration-testing penetration-testing-tools bug-bounty bug-bounty-tools ethical-hacking ethical-hacking-tools osint-tools red-teaming red-teaming-tools web-security contentdiscovery reconnaissance go golang
Language:Go 636
madneal / articles-translator
:books:Translate the distinct technical blogs. Please star or watch. Welcome to join me.
article javascript vue webpack memory-management npm pwa react security css parcel codeql security-tools web web-security
621
Harmoc / CTFTools
Personal CTF Toolkit
hacking ctf-tools web-security hacking-tool
595
trailofbits / twa
A tiny web auditor with strong opinions.
security web-security auditing hacktoberfest
Language:Shell 587
pyhtools
dmdhrumilmistry / pyhtools
A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.
python python3 hacking-tools hackingwithpython hacking telegram-hack remoteaccess hacking-tool ransomware dmdhrumilmistry malware-development penetration-testing apihacking web-security web-hac
Language:Python 546
luigigubello / PayloadsAllThePDFs
PDF Files for Pentesting
pentesting web-pentest web-security
545
Cryin / JavaID
java source code static code analysis and danger function identify prog
java-code-audit web-security
Language:Python 532
splitline / How-to-Hack-Websites
開源的正體中文 Web Hacking 學習資源 - 程式安全 2021 Fall
ctf security web-security
Language:PHP 525

web-security

MobSF / Mobile-Security-Framework-MobSF

chaitin / SafeLine

Hacker0x01 / hacker101

nahamsec / Resources-for-Beginner-Bug-Bounty-Hunters

bunkerity / bunkerweb

infoslack / awesome-web-hacking

vavkamil / awesome-bugbounty-tools

lirantal / awesome-nodejs-security

palahsu / DDoS-Ripper

0xSobky / HackVault

qi4L / JYso

WangYihang / GitHacker

lunasec-io / lunasec

Ge0rg3 / requests-ip-rotator

pushsecurity / saas-attacks

4ra1n / super-xray

blst-security / cherrybomb

devanshbatham / FavFreak

chenjj / CORScanner

Zeyad-Azima / Offensive-Resources

TypeError / secure

backdoorhub / shell-backdoor-list

4ra1n / mysql-fake-server

incredibleindishell / SSRF_Vulnerable_Lab

Lookyloo / lookyloo

tempesta-tech / tempesta

turbo / openftp4

Tmpertor / Raven-Storm

hueristiq / xurlfind3r

madneal / articles-translator

Harmoc / CTFTools

trailofbits / twa

dmdhrumilmistry / pyhtools

luigigubello / PayloadsAllThePDFs

Cryin / JavaID

splitline / How-to-Hack-Websites