Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

Stars: ✭ 427 (+117.86%)

Mutual labels: web-security

lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Stars: ✭ 1,261 (+543.37%)

Mutual labels: web-security

Https hijack demo

HTTPS Frontend Hijack

Stars: ✭ 91 (-53.57%)

Mutual labels: web-security

Javaid

java source code static code analysis and danger function identify prog

Stars: ✭ 327 (+66.84%)

Mutual labels: web-security

Cs253.stanford.edu

CS 253 Web Security course at Stanford University

Stars: ✭ 155 (-20.92%)

Mutual labels: web-security

WDIR

Good resources about web security that I have read.

Stars: ✭ 14 (-92.86%)

Mutual labels: web-security

Viewstate

ASP.NET View State Decoder

Stars: ✭ 77 (-60.71%)

Mutual labels: web-security

shellsum

A defense tool - detect web shells in local directories via md5sum

Stars: ✭ 30 (-84.69%)

Mutual labels: web-security

Bunkerized Nginx

🛡️ Make your web services secure by default !

Stars: ✭ 2,361 (+1104.59%)

Mutual labels: web-security

cyber-gym

Deliberately vulnerable scripts for Web Security training

Stars: ✭ 19 (-90.31%)

Mutual labels: web-security

Prestashop Cve 2018 19126

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

Stars: ✭ 37 (-81.12%)

Mutual labels: web-security

firecracker

Stop half-done API specifications! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by validating your API specifications.

Stars: ✭ 438 (+123.47%)

Mutual labels: web-security

Explo

Human and machine readable web vulnerability testing format

Stars: ✭ 114 (-41.84%)

Mutual labels: web-security

CJ2018-Final-CTF

Cyber Jawara 2018 Final - Attack & Defense CTF services environments based on Docker.

Stars: ✭ 58 (-70.41%)

Mutual labels: web-security

Corscanner

Fast CORS misconfiguration vulnerabilities scanner🍻

Stars: ✭ 601 (+206.63%)

Mutual labels: web-security

Githacker

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

Stars: ✭ 524 (+167.35%)

Mutual labels: web-security

Blind-SSRF

Nuclei Templates to reproduce Cracking the lens's Research

Stars: ✭ 111 (-43.37%)

Mutual labels: web-security

Awesome Bugbounty Tools

A curated list of various bug bounty tools

Stars: ✭ 96 (-51.02%)

Mutual labels: web-security

Lookyloo

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

Stars: ✭ 381 (+94.39%)

Mutual labels: web-security

Hacker101

Source code for Hacker101.com - a free online web and mobile security class.

Stars: ✭ 12,246 (+6147.96%)

Mutual labels: web-security

Ssrf vulnerable lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

Stars: ✭ 361 (+84.18%)

Mutual labels: web-security

Awesome Nodejs Security

Awesome Node.js Security resources

Stars: ✭ 1,294 (+560.2%)

Mutual labels: web-security

Awesome Web Hacking

A list of web application security

Stars: ✭ 3,760 (+1818.37%)

Mutual labels: web-security

Jwt Pwn

Security Testing Scripts for JWT

Stars: ✭ 170 (-13.27%)

Mutual labels: web-security

Shell Backdoor List

🎯 PHP / ASP - Shell Backdoor List 🎯

Stars: ✭ 288 (+46.94%)

Mutual labels: web-security

Mitm Http Cache Poisoning

HTTP Cache Poisoning Demo

Stars: ✭ 83 (-57.65%)

Mutual labels: web-security

Raven-Storm

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

Stars: ✭ 235 (+19.9%)

Mutual labels: web-security

Breach.tw

A service that can track data breaches like "Have I Been Pwned", but it is specific for Taiwan.

Stars: ✭ 144 (-26.53%)

Mutual labels: web-security

Sherlock

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

Stars: ✭ 36 (-81.63%)

Mutual labels: web-security

Mobile Security Framework Mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Stars: ✭ 10,212 (+5110.2%)

Mutual labels: web-security

sqlinjection-training-app

A simple PHP application to learn SQL Injection detection and exploitation techniques.

Stars: ✭ 56 (-71.43%)

Mutual labels: web-security

Lighthouse Security

Runs the default Google Lighthouse tests with additional security tests

Stars: ✭ 190 (-3.06%)

Mutual labels: web-security

How-to-Hack-Websites

開源的正體中文 Web Hacking 學習資源 - 程式安全 2021 Fall