Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing, and testing for common vulnerabilities such as SQLi, IDOR, and authentication issues, with a focus on structured workflow and practical understanding.
☆59Jul 24, 2026Updated 3 months ago
Alternatives and similar repositories for Web-Pentesting-Methodology
Users that are interested in Web-Pentesting-Methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A hand-picked collection of the best bug bounty & web security writeups — libraries, publications, hunters, and Telegram feeds, all in on…☆29Sep 22, 2026Updated last month
- ☆14Jul 15, 2025Updated last year
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 3 months ago
- ☆16Apr 12, 2026Updated 6 months ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆46Aug 1, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆43Jun 12, 2024Updated 2 years ago
- BadGPT is a robust framework designed to simplify and optimize the bug bounty process. Equipped with a suite of tools for reconnaissance,…☆24Dec 1, 2024Updated last year
- 🔐 Offensive security knowledge base — 50+ docs covering web exploitation, bug bounty, privilege escalation, CTF writeups, APT emulation,…☆243Apr 22, 2026Updated 6 months ago
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated 2 months ago
- Agentic offensive-security in your terminal☆1,435Aug 31, 2026Updated 2 months ago
- My Private Bug Hunting Methodology☆455Sep 22, 2026Updated last month
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆98Aug 24, 2026Updated 2 months ago
- A structured archive of Proof-of-Concept security research, organized by category with metadata, reproduction steps, and references.☆39Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- WAPTLab - Web Application Penetration Testing Lab☆120Dec 1, 2025Updated 11 months ago
- Curated, simulated dataset of security logs (Windows, Web, Firewall, Cloud) with embedded attack vectors for SOC analysts to practice SIE…☆35Oct 22, 2026Updated last week
- Active Directory time discovery protocols for red teams. Stealthy extraction via Kerberos, SMB, NTLM, and CLDAP.☆79Oct 18, 2026Updated 2 weeks ago
- CVE-2026-48909 PoC☆24Jul 7, 2026Updated 3 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆79Aug 28, 2026Updated 2 months ago
- Offsec Practice Labs is a curated training arsenal for hands-on prep across eCPPTv3, OSCP, and CPTS.☆268Aug 3, 2026Updated 2 months ago
- This repo contains Machines and Notes for practicing for EJPTv1/2 exam☆17Aug 24, 2023Updated 3 years ago
- ☆77May 5, 2025Updated last year
- ☆31Feb 16, 2026Updated 8 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Oct 16, 2026Updated 2 weeks ago
- My ATO Via Password Reset Methodology☆53May 13, 2026Updated 5 months ago
- ☆28Sep 20, 2022Updated 4 years ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 2 weeks ago
- PenTest and BugBounty 🕵️☆17Sep 15, 2026Updated last month
- ☆14Jun 19, 2024Updated 2 years ago
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- A two-domain Active Directory lab - lab.local + corp.local, 5 machines, 3 flags. Runs on VirtualBox. Spin it up and see how far you get.☆33Jul 26, 2026Updated 3 months ago
- Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution (RCE) conditions.☆12Jul 8, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current…☆70Jun 28, 2026Updated 4 months ago
- bb-huge 🤗 , Personal bug bounty findings hub and bug bounty orchestration for multiple agents☆24Jul 11, 2026Updated 3 months ago
- powerfull pentesting tool to checking email by smtp command☆10Feb 29, 2024Updated 2 years ago
- Structured practice: Mainly PortSwigger lab writeups☆23Updated this week
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆35May 28, 2026Updated 5 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago