A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–24 of 24 · Most stars
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Web path scanner
🐶 A curated list of Web Security materials and resources.
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Low code web framework for real world applications, in Python and Javascript
Securely and anonymously share files, host websites, and chat with friends using the Tor network
Dark Web OSINT Tool
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
Tool to scan for secret files on HTTP servers
Find web directories without bruteforce
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
A modular vulnerability scanner with automatic report generation capabilities.
Modern Python library for HTTP security headers with safe defaults, configurable presets, and first-class ASGI/WSGI middleware (FastAPI, Django, Flask, Shiny, and more).
DeepSeek Harness 破甲一体化安全分析插件：Android · Web · Native · Protocol · Malware · AI-Security 全领域聚合（9 bundle + 1 preset）
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
Tor2web is an HTTP proxy software that enables access to Tor Hidden Services by mean of common web browsers
Scirius is a web application for Suricata ruleset management and threat hunting.
Raspberry PI-TIMOLO ( PI-TImelapse, MOtion, LOwLight ) uses RPI picamera and OpenCV for Remote Headless Security Monitoring using Motion Tracking, Rclone Auto Sync files with remote storage services. Auto Twilight Transitions and Low Light Camera Settings. Panoramic images using PanTiltHat and More. This project is featured on GitHub Awesome software.
Open Source SIEM (Security Information and Event Management system).
WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.
Yosai integration with the Pyramid Web Framework