xalgord/massive-web-application-penetration-testing-bug-bounty-notesA comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying…
0xinfection/tidos-frameworkThe Offensive Manual Web Application Penetration Testing Framework.
dzonerzy/gowaptGo Web Application Penetration Test
aktia1/megaquagga_pentesting_reportWeb application penetration testing project targeting a WordPress environment. Includes exploitation of CVE-2019-9978, reverse shell execution,…
khalilbijjou/wafninjaWAFNinja is a tool which contains two functions to attack Web Application Firewalls.
secdec/adaptADAPT is a tool that performs automated Penetration Testing for WebApps.
nescau-ufla/fuzzingtoolSoftware for fuzzing, used on web application pentestings.
erman-bolukbasi/web-penetration-drupalPenetration test of a Drupal web app — CVE-2018-7600 (Drupalgeddon 2) exploited using Nmap, Burp Suite & Metasploit | Internship @ BB CyberSec
andresriancho/w3afw3af: web application attack and audit framework, the open source web vulnerability scanner.
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
owtf/owtfModular penetration testing framework integrating multiple tools for automated web application security assessment, aligned with OWASP Testing Guide,…
sobri3195/pegasus-pentest-arsenalA comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.
cyberblackhole/domain-to-webappBash script that enumerates subdomains via Subfinder, resolves IPs, and identifies live web applications hosted on a domain for reconnaissance and…
matrixleons/evilwafevilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
tombstoneghost/tiwapDeliberately vulnerable Flask web application with 22 security flaws across 3 difficulty levels for hands-on penetration testing and web security…
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
effortlessdevsec/ninjasworkoutDeliberately vulnerable Node.js web application containing 19+ security bugs (XSS, SSRF, Prototype Pollution, RCE) for hands-on penetration testing…
cappricio-securities/burpflowBurpFlow is one of the best Burp Suite automation tools for bug bounty hunters and penetration testers, widely used to load recon data via proxy and…
