portswigger

anshumanpattnaik/http-request-smuggling

HTTP Request Smuggling Detection Tool

frank-leitner/portswigger-websecurity-academy

Writeups for PortSwigger WebSecurity Academy

ossamayasserr/WebAppPentestRoadmap

Roadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)

simioni87/auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

moeinfatehi/Backup-Finder

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

thelicato/portswigger-labs

A collection of solutions for every PortSwigger Academy Lab (in progress)

elqal3awii/WebSecurity-Academy-with-Python

Scripts for solving WebSecurity Academy labs of PortSwigger using Python

elqal3awii/WebSecurity-Academy-with-Rust

Scripts for solving WebSecurity Academy labs of PortSwigger using Rust

Sivnerof/The-Web-Application-Hackers-Handbook

My notes/solutions to the problems in "The Web Application Hacker's Handbook" (https://portswigger.net/web-security/web-application-hackers-handbook)

Sivnerof/Sources-And-Sinks-Cheatsheet

A cheatsheet for common JavaScript sources and sinks that lead to potential vulnerabilities.

rodnt/PortSwiggerLabs

Solutions from @PortSwigger labs

sadiqsonalkar/PortSwigger-Lab-and-Burpsuite-Tutorial

It is a burpsuite introduction and these are 5 lab I performed in Burpsuite.

NikoRaisanen/Portswigger-Labs

Writeups for Portswigger penetration testing labs

mkassm/portswigger-labs

This is my space for practicing portswigger labs and web vulnerabilities

DhilipSanjay/CTFs

Writeups & Walkthroughs of various CTF challenges and boxes

f4T1H21/Blind-SQL-Injection

A blind SQL injection script that uses binary search aka bisection method to dump datas from database.

LinuxUser255/Web-Security-Academy-Series

Exploit Code, notes, and resources to accompany PortSwiggers' WebAcademy Labs.

rodnt/bffuf

Burp bridge to FFUF

p4p1/burp-http-to-notion

A BurpSuite extention to upload the sitemap to a notion database to organize which endpoint need to be tested.

moeinfatehi/PassiveDigger

Optimize your web vulnerability assessments with PassiveDigger, a comprehensive Burp Suite extension that specializes in passive traffic analysis. Detect potential vulnerabilities, get actionable insights, and supercharge your security audits.

nh4ttruong/portswigger

Tự học WebSec với portswigger

weXe1/PortSwigger-Academy-Solutions

Scripts to help with solving labs on PortSwigger Web Security Academy

xpl0ited1/postMessageFinderBurpSuite

This extension allows you to detect implementations of postMessage function, addEventListener("message",function) event handler and onMessage function.

0xCaretaker/Ultimate-Blind-Boolean-SQL

Blind-Boolean SQLi automation using FFUF

bscpaz/cybersecurity

Mitre Att&ck, Portswigger, hackthebox topics

bwelboren/portswigger

G4T13L/G4T13L.github.io

Blog de notas, aportes, writeups o cosas de ciberseguridad que se me ocurra publicar.

giadagabriele/COD-project

Cyber Offense and Defense Project - Università della Calabria

LiterallyEthical/portswigger-websecurity-academy-solutions

Collection of solutions for Portswigger Websecurity Academy Labs

s4orii/PortSwigger-Lab-Wordlist

Lab: Broken brute-force protection - IP block Wordlist

yaranawr/XSS-Finder-for-PortSwigger

Performs brute-force on URLs to identify cross-site scripting vulnerabilities.

ahanel13/Firewall-Ferret

This java project was created with Portswigger's Montoya API to be a Burp Extension. It's well known that WAFs only scan up to a certain amount of data per request. This extension allows a tester to manually insert junk data and adds junk data to Active Scans by duplicating each scan check.

Clapboiz/PortSwigger-Writeups

pentest web

CyberSpherex/PortSwigger-Lab

This repository contains Python scripts for solving PortSwigger's Web Security Academy labs.

nartgnourt/portswigger

PortSwigger write-up