this repo contains required files for web application pentests
☆200Dec 8, 2016Updated 9 years ago
Alternatives and similar repositories for weapons4pentester
Users that are interested in weapons4pentester are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- this javascript file creates a pop-up for your xss poc.☆27Jan 10, 2017Updated 9 years ago
- this html file creates a csrf poc form to any http request.☆290Dec 14, 2022Updated 3 years ago
- Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools☆289Jul 13, 2024Updated 2 years ago
- Signatures for jaeles scanner by @j3ssie☆115Apr 20, 2024Updated 2 years ago
- A collection of simple tools and poc-builders☆39May 28, 2026Updated 5 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 7 years ago
- ☆102Mar 6, 2023Updated 3 years ago
- A tools for JavaScript Recon☆24Jul 25, 2020Updated 6 years ago
- Quickly add http and https domains to BurpSuite's scope with all paths.☆16Jun 2, 2016Updated 10 years ago
- all manner of wordlists☆23Jan 19, 2022Updated 4 years ago
- Bash script to extract data from the Waybackmachine☆11Mar 15, 2021Updated 5 years ago
- A simple tool which makes creating nuclei templates even easier.☆36Jun 23, 2024Updated 2 years ago
- Directory scans☆89Oct 25, 2026Updated last week
- Explore a rich collection of diverse payloads in these GitHub repositories. 🚀☆12Apr 9, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Everything about xss protection technology☆15Oct 22, 2019Updated 7 years ago
- An another JWT cracker but really fast!☆15Jan 26, 2023Updated 3 years ago
- ☆161Nov 27, 2021Updated 4 years ago
- Some oneliners with descriptions and Regex that I frequently use while doing bug hunting. More to come 🚀🚀☆24Dec 24, 2022Updated 3 years ago
- The Serverless Blind XSS App☆338Mar 28, 2026Updated 7 months ago
- JSSCM detects expired domains for Stored XSS exploitation during browsing.☆59Apr 3, 2025Updated last year
- Burp Suite extension for passive JS reconnaissance - detects 1,600+ secret patterns, API keys, endpoints, and security misconfigurations …☆27Apr 23, 2026Updated 6 months ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆59May 10, 2022Updated 4 years ago
- Hidden parameters discovery suite☆222Nov 14, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Discover new target domains using Content Security Policy☆530Oct 22, 2026Updated last week
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆905May 3, 2023Updated 3 years ago
- This tool can be used to brute discover GET and POST parameters☆1,395Aug 24, 2019Updated 7 years ago
- Database of websites for penetration testing☆186Jan 15, 2020Updated 6 years ago
- Bug Bounty Platforms☆26Oct 17, 2024Updated 2 years ago
- Asset inventory of over 800 public bug bounty programs.☆1,614Feb 14, 2025Updated last year
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files☆12Jun 8, 2020Updated 6 years ago
- OpenBugBounty - https://www.openbugbounty.org/ programs list☆24Mar 15, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- WebApp for BugBounty Hunters☆14Mar 24, 2017Updated 9 years ago
- ☆17Jul 21, 2025Updated last year
- 🎉 CVE Monitor v1.0☆28Jun 30, 2025Updated last year
- your bestfried for finding URLs of a target☆10Apr 5, 2023Updated 3 years ago
- A repository that includes all the important wordlists used while bug hunting.☆1,437Mar 11, 2023Updated 3 years ago
- Trying to make automated recon for bug bounties☆254May 3, 2021Updated 5 years ago
- Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …☆223Dec 7, 2022Updated 3 years ago