Tools and resources for web app hacking. The payloads.txt documents are a must have for your Burpsuite intruder payload armory. They've helped me discover some stubborn and well hidden XSS vulnerabilities.
☆28Jun 10, 2019Updated 7 years ago
Alternatives and similar repositories for web-app
Users that are interested in web-app are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- this contain the burp pack☆208Jan 25, 2017Updated 9 years ago
- ☆19Apr 29, 2019Updated 7 years ago
- A curated list of amazingly bug bounty tips from security researchers around the world.☆108Mar 14, 2019Updated 7 years ago
- SubR3con is a script written in python. It uses Sublist3r to enumerate all subdomains of a specific target and then it checks for status …☆18Jul 23, 2019Updated 7 years ago
- A sub-domain enumeration tool☆20May 18, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆31Feb 10, 2020Updated 6 years ago
- -☆11Nov 21, 2020Updated 5 years ago
- Cheat Sheets, Metodologies etc.☆19Apr 12, 2019Updated 7 years ago
- Insecure Deserialization, PDF and lab☆18Nov 19, 2019Updated 6 years ago
- This is a set of tips and reminders for pentesting processes and scripts/programs. Initially for personal use, but if anyone else finds t…☆53Mar 2, 2020Updated 6 years ago
- $ curl -sL sub.sh | bash☆17Aug 7, 2023Updated 3 years ago
- Collection of tips, tools and tutorials around infosec☆29May 18, 2017Updated 9 years ago
- Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…☆105Feb 11, 2019Updated 7 years ago
- Burp Suite extension to discover assets from HTTP response.☆235Jan 22, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆11Dec 17, 2023Updated 2 years ago
- My Recon Automation☆191May 28, 2021Updated 5 years ago
- This repository is created for personal use and added tools from my blog post.☆14May 7, 2026Updated 5 months ago
- Resources I consider useful for security research of web applications☆62Dec 15, 2020Updated 5 years ago
- Official CTF for 44CON 2019☆17Jul 22, 2023Updated 3 years ago
- A subdomain reconnaissance scanner☆35Dec 8, 2022Updated 3 years ago
- A collection of scripts to extend Burp Suite☆142Apr 8, 2019Updated 7 years ago
- ☆21Nov 13, 2019Updated 6 years ago
- Proof of concept code for client-side vulnerabilities☆17Mar 14, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆74Jan 4, 2021Updated 5 years ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆122May 12, 2026Updated 5 months ago
- Enumerate AWS S3 buckets using different permutations☆17Jan 28, 2022Updated 4 years ago
- A Mozilla Firefox extension which allows quick access to your google-dorking result☆19Jun 18, 2020Updated 6 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆17Jul 25, 2026Updated 3 months ago
- burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz☆61Dec 4, 2018Updated 7 years ago
- Tool for test XSS vulnerabilities of a site☆18Apr 1, 2018Updated 8 years ago
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆50Feb 27, 2019Updated 7 years ago
- Subdomain Scan With Ping Method.☆46Dec 12, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests☆21May 1, 2017Updated 9 years ago
- Burp Intruder File Payload Generator☆18Oct 27, 2019Updated 7 years ago
- This Repo help you to download most helpful GO tools on the system .☆22Dec 7, 2022Updated 3 years ago
- Compilation of JavaScript XSS oneliners payloads that rocks your nuts!☆24Jul 14, 2017Updated 9 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆100Jul 29, 2019Updated 7 years ago
- ☆24Jan 26, 2021Updated 5 years ago