#1Tools for testing, exploiting, and securing web applications and APIs.
Kitploit recommended
apify/crawleeNode.js web scraping and browser automation library for building reliable crawlers with HTTP and headless browser support, proxy rotation, and…
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
manisso/fsocietyfsociety Hacking Tools Pack – A Penetration Testing Framework
projectdiscovery/nuclei-templatesCommunity curated list of templates for the nuclei engine to find security vulnerabilities.
mr-xn/penetration_testing_poc渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor…
digininja/dvwaIntentionally vulnerable PHP/MariaDB web application for practicing common web security vulnerabilities across multiple difficulty levels in a legal,…
matrixtm/mhddosBest DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
sbilly/awesome-securityA collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
ffuf/ffufFast web fuzzer written in Go
m1k1o/nekoA self hosted virtual browser that runs in docker and uses WebRTC.
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
semgrep/semgrepLightweight static analysis for many languages. Find bug variants with patterns that look like source code.
maurosoria/dirsearchWeb path scanner
carpedm20/awesome-hackingA curated list of awesome Hacking tutorials, tools and resources
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
oauth2-proxy/oauth2-proxyA reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
zardus/ctf-toolsSome setup scripts for security research tools.
