Topic: websecurity Goto Github

👇 Here are 258 public repositories matching this topic...

0chencc / ctfcracktools
websecurity,China's first CTFTools framework.**国内首个CTF工具框架,旨在帮助CTFer快速攻克难关
User: 0chencc
Home Page: https://0chencc.github.io/CTFCrackTools/
ctf ctf-tools framework java jython kotlin-java python websecurity

710leo / zvuldrill
websecurity,Web漏洞演练平台
User: 710leo
websecurity security

backdoorhub / shell-backdoor-list
websecurity,🎯 PHP / ASP - Shell Backdoor List 🎯
Organization: backdoorhub
shell backdoor shell-backdoor web-shell hacking hackingcode web-hacking r57 c99 b374k

bhavesh-pardhi / wordlist-hub
websecurity,Welcome to the Bug Hunter's Wordlists repository! 🐛🔍 This repository serves as a comprehensive collection of essential wordlists utilized by bug hunters, penetration testers, and security enthusiasts during their reconnaissance and vulnerability assessment processes.
User: bhavesh-pardhi
brute-force bug-hunting cybersecurity ethical-hacking security webapplicationhacking webapplicationsecurity websecurity wordlist allwordlists

blst-security / cherrybomb
websecurity,Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.
Organization: blst-security
Home Page: https://www.blstsecurity.com/cherrybomb
blst firecracker cli cyber cybersecurity business-logic security-tools security api api-security

cheshirecaat / browser-with-fingerprints
websecurity,Anonymous automation with fingerprint replacement technology.
User: cheshirecaat
automation browser browser-fingerprint browser-fingerprinting chrome chromium device-fingerprint device-fingerprinting devtools fingerprint

coldwave96 / websecurity
websecurity,Web渗透学习笔记
User: coldwave96
Home Page: https://coldwave96.github.io/
library websecurity references

dontpanico / jwtxploiter
websecurity,A tool to test security of json web token
User: dontpanico
jku jwks x5u-injection jwt jwt-security jwt-cracker jwt-exploit security-tools pentesting pentest

dubs3c / injectus
websecurity,CRLF and open redirect fuzzer
User: dubs3c
crlf-injection open-redirect-injection websecurity scanner python

findneo / newbie-security-list
websecurity,网络安全学习资料，欢迎补充
User: findneo
ctf greenhand resource-list security websecurity

flipkart-incubator / rta
websecurity,Red team Arsenal - An intelligent scanner to detect security vulnerabilities in company's layer 7 assets.
Organization: flipkart-incubator
security-tools security websecurity nessus python

fly-playgroud / boom
websecurity,Boom 是一款基于无头浏览器的智能 Web 弱口令（后台密码）爆破\检测工具
User: fly-playgroud
go-rod golang password-cracking-tool passwrod websecurity

gbiagomba / sherlock
websecurity,This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
User: gbiagomba
sherlock security security-tools security-audit cybersecurity cyber-security redteam red-team redteaming red-teaming red-team-engagement web-security web-sec-scanner websecurity websec security-automation security-scanner security-testing security-team

glebarez / cero
websecurity,Scrape domain names from SSL certificates of arbitrary hosts
User: glebarez
domain-names recon scrape ssl tls websecurity

greenpau / caddy-security
websecurity,🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
User: greenpau
Home Page: https://authcrunch.com/
caddy-plugin caddy2 security jwt authorization authentication auth paseto paseto-tokens saml oauth2 ldap openid acl access-control websecurity secops secdevops sso webauthn

h0tak88r / s8cn8tes
websecurity,Cyber Security Notes, Methodology, Resources and Tips
User: h0tak88r
Home Page: https://sallam.gitbook.io/
bugbounty bughunting methodology penetration-testing security security-testing how-to-hack hackerone-reports writeups appsec

holybugx / holytips
websecurity,A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.
User: holybugx
security web webapp websecurity bugbounty bugbountytips bugbounty-writeups pentest pentesting writeups

insightglacier / dictionary-of-pentesting
websecurity,Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
User: insightglacier
pentesting fuzzing bruteforce bugbounty dictionary websecurity iot-security password pentest regex-pattern

janniskirschner / horn3t
websecurity,Powerful Visual Subdomain Enumeration at the Click of a Mouse
User: janniskirschner
enumeration penetration-testing pentesting security-audit security-tools selenium selenium-webdriver subdomain-bruteforcing subdomain-enumeration subdomain-scanner subdomain-takeover subdomainsbrute sublist3r websecurity

knassar702 / lorsrf
websecurity,Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:
User: knassar702
ssrf bruteforce bugbounty websecurity penetration-testing rust pentesting fuzzing hacking blindssrf

lucideus-repo / cybergym
websecurity,Lucideus CyberGym is the internal CTF event we organise for our security professionals to grow and learn together. Now everyone can access the challenges that can be easily setup and start playing.
User: lucideus-repo
Home Page: https://www.lucideus.com
pentesting penetration-testing websecurity ctf ctf-challenges ctf-writeups mobilesecurity security cybersecurity networksecurity

mehdi0x90 / web_hacking
websecurity,Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
User: mehdi0x90
api-pentest bugbounty hacking payloads penetration-testing recon web-application-security webhacking websecurity bypass

odino / wasec
websecurity,Examples of security features (or mishaps) on web applications -- these are mostly examples and tutorials from the WASEC book.
User: odino
Home Page: https://leanpub.com/wasec
wasec security book xss csp clickjacking websecurity

payloadbox / csv-injection-payloads
websecurity,🎯 CSV Injection Payloads
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
csv-injection csv csv-exploit csv-payload csv-payloads websecurity websec bugbounty bug-bounty bugbountytips

payloadbox / directory-payload-list
websecurity,🎯 Directory Payload List
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
payloadbox directory directory-payload directory-list payload-list payload payloads fuzzing fuzz fuzz-testing bugbounty bug-bounty websecurity websec websecurity-reference web-security web-security-research web-secure awesome awesome-list

payloadbox / open-redirect-payload-list
websecurity,🎯 Open Redirect Payload List
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
open-redirect openredirect payload-list payload payloads security websecurity

payloadbox / rfi-lfi-payload-list
websecurity,🎯 RFI/LFI Payload List
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
rfi lfi rfi-exploiton lfi-exploitation lfi-vulnerability rfi-vulnerabillity websecurity appsec application-security web-application-security

payloadbox / sql-injection-payload-list
websecurity,🎯 SQL Injection Payload List
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
sql-injection attacker sql-injection-attacks sql-injection-proof sql-injection-exploitation sql-injections sql-injection-payloads injection-payloads sql-injection-filterer sql-injection-attack

payloadbox / ssti-payloads
websecurity,🎯 Server Side Template Injection Payloads
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
server-side-template-injection ssti injection payload payloads payloadbox bugbounty bounty bugbountytips websecurity

payloadbox / xss-payload-list
websecurity,🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
xss xss-payloads xss-vulnerability xss-exploitation xss-detection xss-attacks xss-scanner xss-injection xss-poc xss-scanners

payloadbox / xxe-injection-payload-list
websecurity,🎯 XML External Entity (XXE) Injection Payload List
Organization: payloadbox
Home Page: https://ismailtasdelen.medium.com
xxe xxe-injection xxe-payloads xxe-example xml websecurity websecurity-reference infosec bugbounty bug-bounty

probely / security_checklist
websecurity,Web Application Security Checklist
Organization: probely
checklist prevention security vulnerability web websecurity

proviesec / google-dorks
websecurity,Useful Google Dorks for WebSecurity and Bug Bounty
Organization: proviesec
bugbounty google security websecurity cybersecurity

qazbnm456 / awesome-web-security
websecurity,🐶 A curated list of Web Security materials and resources.
User: qazbnm456
Home Page: https://awesomelists.top/#/repos/qazbnm456/awesome-web-security
awesome-list awesome list web security websecurity penetration-testing

quarantyne / quarantyne
websecurity,Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
Organization: quarantyne
account-takeover automation bots fraud security websecurity

radenvodka / recsech
websecurity,Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .
User: radenvodka
recon research tools recon-tools php security-vulnerability security-audit security-tools hacking-tool websecurity

rhaidiz / broxy
websecurity,An HTTP/HTTPS intercept proxy written in Go.
User: rhaidiz
wapt proxy interceptor broxy http-interceptor hacking security http-proxy qt5-gui golang

security-prince / application-security-engineer-interview-questions
websecurity,Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
User: security-prince
security-engineer-interview webappsec appsec devsecops infosec application-security vulnerability sdlc xss interview-questions

security-prince / resources-for-application-security
websecurity,Some good resources for getting started with application security
User: security-prince
appsec appsec-tutorials websecurity websecurity-reference websec infosec infosec-reference owasp application-security web-hacking

sh3bu / portswigger_labs
websecurity,This repository contains my writeups for the labs in PortSwigger's Web Security Academy platform. Each lab writeup includes the lab's name, description, and my step-by-step solution, as well as any additional notes or observations.
User: sh3bu
owasp-top-10 portswigger-labs websecurity writeups

sqlsec / ssrf-vuls
websecurity,国光的手把手带你用 SSRF 打穿内网靶场源码
User: sqlsec
Home Page: https://web.sqlsec.com/thread/130
ssrf vulhub websecurity

vainlystrain / vailyn
websecurity,A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
User: vainlystrain
websecurity information-leak exploitation vulnerability-scanners directory-traversal path-traversal pentest-tool websec vulnerability-assessment penetration-testing

wangyihang / awesome-web-security
websecurity,:notebook: Some notes and impressive articles of Web Security
User: wangyihang
Home Page: https://www.gitbook.com/book/wangyihang/awesome-web-security
websecurity websecurity-reference awesome awesome-list

wangyihang / sourceleakhacker
websecurity,:bug: A multi threads web application source leak scanner
User: wangyihang
websecurity hacking-tool scanner webscanner

wossl33 / wossl
websecurity,OpenSSL对称算法、哈希校验、非对称算法、证书管理、SSL安全
User: wossl33
openssl pyopenssl ssl-certificate ssllabs python flask-web websecurity

xinali / articles
websecurity,Personal Blog/主记录漏洞挖掘相关研究(文章位于issues)
User: xinali
binary binary-security websecurity blogs

yagamiilight / cerberus
websecurity,一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
User: yagamiilight
hacking-tool sql-injection xss waf proxy middleware ssrf penetration-testing security-tools websecurity

yeswehack / vulnerable-code-snippets
websecurity,Twitter vulnerable snippets
Organization: yeswehack
bugbounty code code-analyze example-code owasp snippets vulnerable web-application websecurity worst-practices

zer0yu / cybersecurityrss
websecurity,CyberSecurityRSS: A collection of cybersecurity rss to make you better!
User: zer0yu
rss security knowledgebase rss-subscription cyberspace-security websecurity redteam

zer0yu / redteam_cheetsheets
websecurity,RedTeam参考，修改自Ridter的https://github.com/Ridter/Intranet_Penetration_Tips
User: zer0yu
redteam websecurity hacking