web-pentesting

This is a website penetration testing tool for testing webdav server vulnerabilities.

Aplicação Python com interface gráfica que permite configurar regras de interceptação para modificar parâmetros de requisições HTTP. Quando o navegador envia uma requisição para uma rota configurada, o proxy intercepta, modifica apenas os parâmetros especificados e encaminha a requisição mantendo todos os outros parâmetros originais.

rep+ — Burp-style HTTP Repeater for Firefox DevTools with Auth Analyzer and built-in AI to explain requests and suggest attacks

Web Pentesting

Actionable, multi-language OWASP Web Security Testing Guide (WSTG) checklists.

Some powerful templates for nuclei

Serverside Template Injection (SSTI) RCE - THM challenge "whiterose"

Extract secret from js files

Cybersecurity Student from Bihar, India 🇮🇳 | Linux User 🐧 | Web Pentesting | Python & Bash Scripting | Ethical Hacking | Learning to break things — the right way.

Highly optimized HTTP brute force engine in Go featuring many interesting and facilitating abilities

Professional web pentesting methodology based on OWASP standards. Structured workflow from reconnaissance to reporting. Enterprise-grade testing framework.

A professional penetration testing report sample analyzing vulnerabilities in the OWASP Juice Shop.

Web Pentesting Toolkit — recon, SQLi, XSS, dir bruteforce & subdomain enumeration

A task & file management application vulnerable to several attacks

A stack-agnostic web application penetration testing checklist based on OWASP WSTG, ASVS, PTES & NIST.

Cybersecurity and DevSecOps knowledge base — Linux administration, server hardening, Docker and web pentesting notes. Next.js + Nextra, deployed at omarsec.com.

Personal TryHackMe write-ups, notes and methodologies covering advanced web application exploitation, custom tooling, cryptographic attacks, vulnerability chaining and WAF bypass techniques.

Automated web pentesting framework for detecting SQLi, XSS, CSRF, insecure cookies, and SSL misconfigurations.

Personal TryHackMe write-ups, notes and methodologies covering web application penetration testing, vulnerability discovery, exploitation and remediation.

A Burp Suite extension that scans for CORS misconfigurations with 35+ techniques directly inside BurpSuite.