Tools

purpleteam-labs/purpleteam-app-scanner

Application scanning component of purpleteam

purpleteam-labs/purpleteam-s2-containers

Stage two containers

purpleteam-labs/purpleteam-server-scanner

Server scanning component of purpleteam

purpleteam-labs/purpleteam

CLI component of purpleteam

purpleteam-labs/purpleteam-tls-checker

TLS checking component of purpleteam

purpleteam-labs/purpleteam-orchestrator

Orchestration component of purpleteam

swisskyrepo/payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

infoslack/awesome-web-hacking

Curated list of web application security resources including books, tools, cheat sheets, labs, and courses for learning penetration testing and…

andresriancho/w3af

Open-source web application security scanner that identifies and exploits 200+ vulnerabilities including XSS, SQL injection, and OS commanding.…

owtf/owtf

Modular penetration testing framework integrating multiple tools for automated web application security assessment, aligned with OWASP Testing Guide,…

shenril/sitadel

Web Application Security Scanner

foxvr-sudo/bug-bounty-arsenal-v.3

Full-stack platform for authorized web application security scanning with a detector-based engine, async Celery workers, and a React dashboard for…

timothyjxhn/deliberatelyvulnerablewebapp

A Deliberately Vulnerable Web Application built on Struts 2 (CVE-2017-5638) and Log4J (CVE-2021-44228) for testing and demonstration of OWASP Top 10…

webgoat/webgoat

Deliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…

taksec/google-dorks-bug-bounty

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

spinkham/skipfish

Web application security scanner created by lcamtuf for google - Unofficial Mirror