A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
47,133 repositories indexed
1–24 of 67 · Most stars
ALL IN ONE Hacking Tool For Hackers
- allinonehackingtool
- web-attack
- password-attack
- hacking
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
🕵️♂️ Collect a dossier on a person by username from 6K websites
- osint
- social-network
- identification
- socmint
Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Web path scanner
🐶 A curated list of Web Security materials and resources.
Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Low code web framework for real world applications, in Python and Javascript
- frappe
- erpnext
- python
- javascript
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
Insular email distribution - mail server as Docker images
Securely and anonymously share files, host websites, and chat with friends using the Tor network
- tor
- file-sharing
- onionshare
- onion-service
Web application fuzzer
JSON Web Token implementation in Python
- python
- jwt
- hacktoberfest
Dark Web OSINT Tool
- tor
- tor-network
- deepweb
- dark-web
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
- web-analytics
- monitoring
- django
- python
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
Tool to scan for secret files on HTTP servers
- security
- websecurity