goWAPT

GOWAPT - Go 网络应用渗透测试 GOWAPT 是 wfuzz 的弟弟，WAPT 的瑞士军刀，它允许渗透测试人员毫无压力地执行大量活动，只需配置好，点击即可。 如何安装 要安装 gowapt，只需输入： make sudo make install 用法 来自 -h 菜单 Usage of gowapt: -H value 附加头部列表 -a string 基本认证 user:password -c string Cookie 列表 -d string 请求的 POST 数据 -e string 逗号分隔的编码器列表 默认 "plain" -f string 过滤结果...

AWE

AWE: Agentes Adaptativos para Pruebas de Penetración Web Dinámicas Akshat Singh Jaswal · Ashish Baghel Aceptado en NDSS LAST-X 2026 Resumen Las aplicaciones web modernas se producen cada vez más mediante desarrollo asistido por IA y pipelines de despliegue sin código de rápida evolución, lo que...

lorsrf

LORSRF - 2.1 Lorsrf 是一款强大的 Web 渗透测试工具，旨在识别可用于 SSRF 或带外资源加载攻击的参数。通过向参数值中添加 OAST 主机（如 Burp Collaborator），Lorsrf 可以生成一个 HTTP 请求，该请求会被 Burp Collaborator 接收，而无需任何有关目标的实际信息。 为了解决这个问题，Lorsrf 包含一个功能，允许您将特定的目标信息片段作为变量添加到 OAST 主机中。这使您能够更轻松地识别易受攻击的参数和端点，最终让您更便捷地保护 Web 应用。 此外，Lorsrf 还允许您使用特殊变量在 OAST...

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

渗透测试，从新手到专家！ 本指南专为初学者和有经验的渗透测试者设计。它涵盖了 Web 应用程序渗透测试的所有方面，包括基本概念、使用 Burp Suite 和 bWAPP 等工具设置测试环境，以及识别和利用漏洞的详细方法，尤其是 OWASP Top 10 中列出的漏洞。该指南还提供了实用资源，例如视频教程和相关工具的链接，对于任何希望提高 Web 应用程序安全测试和漏洞赏金猎寻技能的人来说都很有价值。 内容列表： 阶段 1 - 历史 阶段 2 - Web 和服务器技术 阶段 3 - 使用 Burp Suite 和 bWAPP 搭建实验室 阶段 4 - 映射应用程序和攻击面 阶段 5 -...

wingman

/|\ / | ...

owasp-web-pentest-tools

OWASP Web Pentest Tools CLI toolkit para suporte em testes de...

zparty

Zparty Automated web penetration testing framework with loc...

Red-MIRROR: Agentic LLM-Based Autonomous Penetration Testing with Reflective Verification and Knowledge-Augmented Interaction

Web applications remain the dominant attack surface in cybersecurity, where vulnerabilities such as SQL injection, XSS, and business logic flaws continue to cause significant data breaches. While penetration testing is effective for identifying these weaknesses, traditional manual approaches are...

ApexPlanet-Task5-capstone-webapp-pentest

🛡️ Capstone Project — Web Application & Network Penetration Test...

Erlik 2 - Vulnerable-Flask-App

Erlik 2 - Vulnerable-Flask-App Tested - Kali 2022.1 Description It is a vulnerable Flask Web App. It is a lab environment created for people who want to improve themselves in the field of web penetration testing. Features It contains the following vulnerabilities. HTML Injection XSS SSTI SQL...

Learn Ethical Hacking Online – A to Z Training Bundle 2019

Good news for you is that this week's THN Deals brings Ethical Hacking A to Z Bundle that let you get started regardless of your experience level. The Ethical Hacking A to Z Bundle will walk you through the very basic skills you need to start your journey towards becoming a professional ethical...

Get 10 Popular Books To Learn Advanced Hacking [2018 Bundle]

It should come as no surprise that cybersecurity is one of the most important and lucrative fields in the world right now, and it's becoming more important every day—thanks to a growing number of cyber attacks that are targeting everything from individuals and startups to Fortune 500 companies an...

wordpress wp-topbar 4.02 - Multiple Vulnerabilities

No description provided by source. Exploit Title: WP-TopBar 4.02 CSRF Date: 2012-09-13 Author: Blake Entrekin Version: 4.02 Download Link: http://downloads.wordpress.org/plugin/wp-topbar.4.02.zip Vendor Link: http://wordpress.org/extend/plugins/wp-topbar/ ------------------- CSRF...

[Burp Co2] A collection of enhancements for Portswigger's popuplar Burp Suite web penetration testing tool

Co2 includes several useful enhancements bundled into a single Java-based Burp Extension. The extension has it's own configuration tab with multiple sub-tabs for each Co2 module. Modules that interact with other Burp tools can be disabled from within the Co2 configuration tab, so there is no need...

About the PHP code auditing and vulnerability digging a little thought-vulnerability warning-the black bar safety net

Here is the PHP code auditing and vulnerability discovery the idea to do a bit summary, is a personal point of view, there is something wrong place please point out. PHP vulnerabilities in a large part is from the programmer's own lack of experience, of course, and server configuration related, b...

WordPress Wp-TopBar 4.02 CSRF / XSS

Exploit Title: WP-TopBar 4.02 CSRF Date: 2012-09-13 Author: Blake Entrekin Version: 4.02 Download Link: http://downloads.wordpress.org/plugin/wp-topbar.4.02.zip Vendor Link: http://wordpress.org/extend/plugins/wp-topbar/ ------------------- CSRF ------------------- The wp-topbar.php does not...

WordPress Plugin wp-topbar 4.02 - Multiple Vulnerabilities

Exploit Title: WP-TopBar 4.02 CSRF Date: 2012-09-13 Author: Blake Entrekin Version: 4.02 Download Link: http://downloads.wordpress.org/plugin/wp-topbar.4.02.zip Vendor Link: http://wordpress.org/extend/plugins/wp-topbar/ ------------------- CSRF ------------------- The wp-topbar.php does not...