web-application-security
There are 154 repositories under web-application-security topic.
codingo/NoSQLMap
Automated NoSQL database enumeration and web application exploitation tool.
owtf/owtf
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp
0xInfection/TIDoS-Framework
The Offensive Manual Web Application Penetration Testing Framework.
wallarm/gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
codingo/VHostScan
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
payloadbox/xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
Janusec/janusec
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server Load Balance, and Cookie Compliance etc. JANUSEC应用网关，提供安全的接入，包括反向代理、K8S Ingress Controller、自动化ACME证书、WAF、5秒盾、CC防御、OAuth2身份认证、GSLB负载均衡与Cookie合规等。
Mehdi0x90/Web_Hacking
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
wallarm/api-firewall
Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.
payloadbox/rfi-lfi-payload-list
🎯 RFI/LFI Payload List
ZishanAdThandar/pentest
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
DoS0x99/cyber-security-books
A collection of FREE cyber security books
vatsalgupta67/All-In-One-CyberSecurity-Resources
List of CyberSecurity Resources and some different Sub-Domains of CyberSecurity
Anon-Exploiter/SiteBroker
A cross-platform python based utility for information gathering and penetration testing automation!
gildasio/h2t
h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply
mhmdiaa/second-order
Second-order subdomain takeover scanner
ImAyrix/fallparams
Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist
PalindromeLabs/STEWS
A Security Tool for Enumerating WebSockets
ImAyrix/cut-cdn
✂️ Removing CDN IPs from the list of IP addresses
migueltc13/TryHackMe
Master cybersecurity skills with this TryHackMe free path, includes a collection of my write-ups, solutions and progress tracking.
security-checklist/php-security-check-list
PHP Security Check List [ EN ] 🌋 ☣️
PalindromeLabs/awesome-websocket-security
Awesome information for WebSockets security research
codingo/crithit
Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.
sqreen/go-agent
Sqreen's Application Security Management for the Go language
mhmdiaa/chronos
Wayback Machine OSINT Framework
tprynn/web-methodology
Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
spyboy-productions/WebSecProbe
Bypass 403
MrM8BRH/SuperLibrary
Information Security Library
CyberAlbSecOP/Awesome_CyberSec_Bible
Cyber-Security Bible! Theory and Tools, Kali Linux, Penetration Testing, Bug Bounty, CTFs, Malware Analysis, Cryptography, Secure Programming, Web App Security, Cloud Security, Devsecops, Ethical Hacking, Social Engineering, Privacy, Incident Response, Threat Assestment, Personal Security, Ai Security, Android Security, Iot Security, Standards.
VainlyStrain/Vaile
Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)
oshp/headers
An application to catch, search and analyze HTTP secure headers.
AhmedConstant/lazyGrandma
a shell script aim to automatically launch 50+ online web scanning tools in the Browsaer against a target domain in a 10 waves
kljunowsky/CVE-2023-36845
Juniper Firewalls CVE-2023-36845 - RCE
teler-sh/teler-proxy
🔐 teler Proxy enabling seamless integration with teler WAF 🛡️ to protect locally running web service against a web-based attacks. 🥷
timokoessler/easy-waf
An easy-to-use Web Application Firewall (WAF) for Node.js. Can be used with Express, Fastify, NextJS, NuxtJS ... or plain Node.js http.
roottusk/xforwardy
Host Header Injection Scanner