websec

There are 9 repositories under websec topic.

dirhunt
Nekmo / dirhunt
Find web directories without bruteforce
crawler dirscanner pentesting python security security-tools websec without-bruteforce
Language:Python 1942
devploit / nomore403
🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.
403 403-bypass bugbounty bypass ctf go http pentest pentesting reconnaissance security tool waf-bypass websec
Language:Go 1370
deibit / cansina
Web Content Discovery Tool
pentesting python security-audit websec
Language:Python 905
security-prince / Application-Security-Engineer-Interview-Questions
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
application-security appsec devsecops infosec interview-questions sdlc security-engineer-interview security-engineering security-team vulnerability webappsec websec websecurity websecurity-reference xss
677
l4wio / CTF-challenges-by-me
Pwnable|Web Security|Cryptography CTF-style challenges
ctf-challenges ctf pwnable websec cryptography ctf-writeups
Language:CSS 425
devploit / XORpass
Encoder to bypass WAF filters using XOR operations.
bugbounty pentesting php waf-bypass websec xor
Language:Python 254
devploit / debugHunter
Discover hidden debugging parameters and uncover web application secrets
bugbounty ctf pentesting websec
Language:JavaScript 246
payloadbox / csv-injection-payloads
🎯 CSV Injection Payloads
csv-injection csv csv-exploit csv-payload csv-payloads websecurity websec bugbounty bug-bounty bugbountytips code-security security payload payloads payloadbox
234
Vailyn
VainlyStrain / Vailyn
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
websecurity information-leak exploitation vulnerability-scanners directory-traversal path-traversal pentest-tool websec vulnerability-assessment penetration-testing filter-evasion vulnerability-detection pentesting lfi lfi-shells lfi-exploitation security local-file-inclusion rce takeover
Language:Python 201
payloadbox / directory-payload-list
🎯 Directory Payload List
payloadbox directory directory-payload directory-list payload-list payload payloads fuzzing fuzz fuzz-testing bugbounty bug-bounty websecurity websec websecurity-reference web-security web-security-research web-secure awesome awesome-list
183
doyensec / CSPTPlayground
CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
appsec-testing cspt csrf websec websecurity
Language:JavaScript 145
security-prince / Resources-for-Application-Security
Some good resources for getting started with application security
appsec appsec-tutorials websecurity websecurity-reference websec infosec infosec-reference owasp application-security web-hacking php-security ctf security-engineering
142
tyki6 / MyJWT
A cli for cracking, testing vulnerabilities on Json Web Token(JWT)
pentesting security security-tools python jwt jsonwebtoken websec cli rawsec ctf pentest pypi blackarch blackarch-packages rootme root-me
Language:Python 136
devploit / put2win
Script to automate PUT HTTP method exploitation to get shell
bash pentesting websec
Language:Shell 125
gbiagomba / Sherlock
This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
cyber-security cybersecurity red-team red-team-engagement red-teaming redteam redteaming security security-audit security-automation security-scanner security-team security-testing security-tools sherlock web-sec-scanner web-security websec websecurity
Language:Shell 87
rastating / xss-chef
A web application for generating custom XSS payloads
javascript react xss xss-exploitation xss-exploit penetration-testing security websec
Language:JavaScript 78
ostrio
veliovgroup / ostrio
▲ SEO Middleware • Web Analytics • Web CRON • WebSec • HTTP & SNMP Monitoring • ostr.io is a unified web-services platform
monitoring analytics prerendering webcron websecurity websec web-analytics web-cron gdpr privacy-policy seo sms-notifications snmp down-detector ccpa
73
1diot9 / MyJavaSecStudy
在Java安全学习过程中的笔记和代码
java javasecurity security websec websecurity
Language:JavaScript 55
netizenship
rahulrajpl / netizenship
a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.
cybersecurity osint-python information-retrieval information-gathering information-security infosec websecurity websec
Language:Python 49
SecuringTheStack / tutorials
Additional Resources For Securing The Stack Tutorials
tutorials infosec cybersecurity secure-coding appsec websec appsec-tutorials owasp
Language:JavaScript 40
Hacker-Scoper
ItsIgnacioPortal / Hacker-Scoper
CLI tool for filtering URLs/IPs with automatically-updated Bug Bounty program scope rules.
bugbounty scopes filter recon infosec enumeration go golang pentesting security security-tools websec websecurity bugcrowd hackerone shell tool
Language:Go 35
umair9747 / 4oFour
A tech enumeration toolkit focused on 404 Not found pages.
bounty bug-bounty bugbounty cybersecurity cybersecurity-tools ethical-hacking infosec linux osint penetration-testing pentesting recon reconnaissance webappsecurity websec websecurity
Language:Go 25
Crypto-Cat / cryptocat-gitbook
Repository for my GitBook (CTF writeups / vuln research / bugbounty)
appsec binary-exploitation capture-the-flag ctf cybersecurity gitbook hacking infosec pwn websec writeups ctftime offsec bug bug-bounty exploit-development vulnerability-research
Language:Python 14
ducdatdau / Writeups
writeups/solvers for CTF challenges
cryptography ctf pwnable reverse-engineering websec
Language:Python 10
foospidy / sigsci-power-rules
Rule packs for Signal Sciences power rules platform.
signalsciences rules powerrules websecurity websec appsec sigsci signal-sciences signal-sciences-api
Language:Shell 5
vin-hacks / ClaraClassroom
The Clara S. Traversal's classroom is an intermediate level web security challenge (black box) where you will have to exploit both client-side and server-side vulnerability in order to change a student grade. Can you hack the class and get in? Access teacher only features? Do even more than the teacher can? Good luck!
ctf cybersecurity hacking javascript python vulnerability web webhacking websec
Language:Python 5
t0nyc23 / condi
Content Discovery/Directory Brute-forcing using Python3
bruteforce bugbounty python3-recon recon websec
Language:Python 4
VulnCode1337 / VulnCode
VulnCode: Secure Code Review Training -- This application allows the user to practice identifying vulnerabilities within codeblocks. Each codeblock was engineered to contain a single vulnerability. There are three difficulty levels. Each exercise contains a detailed explanation which becomes available after a correct answer or three wrong answers.
source-code-analysis websec burpsuite-pro express security-vulnerability vulnerability-research cpp csharp golang java php python ruby
Language:PowerShell 4
alessiovierti / blindpie
Automatically exploit time-based blind SQL injection vulnerabilities
blind-sql-injection cybersecurity exploit python sql-injection sqli time-based-blind-sql-injection websec websecurity
Language:Python 3
Drayko / Web-Elements-List
Lists of elements that compose HTML and SVG structure to fuzz in security testing checks
attributes eventhandlers html security svg tags websec websecurity
2
Az3z3l / Az3z3l.github.io
The B.L.O.G experiment
blog websec
Language:HTML 1
Az3z3l / webXtools
A collection of often-used scripts and tools
toolkit websec ctf
Language:Python 1
dkasak / relative-urls
Extract endpoints from stdin or files.
python url endpoint extraction pentesting security bug-hunting bug-bounty websec
Language:Python 1
Kaiser784 / Web-sec-challenges
A collection of small web-security challenges
websec ctf django websecurity postgresql postgresql-database
Language:JavaScript 1
rarecoil / overthewire
Writeups for Over The Wire wargames, for total security noobs.
wargames infosec websec owasp ctf-writeups noob-friendly
1
tharuvk18 / Sec-Interview
🔍 Explore a comprehensive collection of cybersecurity interview questions and answers, designed for all positions in the field.
application-security cybersecurity-training devsecops education interview-preparation learning-resources pentesting sec secure security-engineer-interview security-interview-questions security-questions security-team snippets web-security-research webappsec websec xss
1