goWAPT

GOWAPT — Тестирование на проникновение веб-приложений на Go GOWAPT — младший брат wfuzz, швейцарский армейский нож WAPT, который позволяет пентестерам выполнять масштабные действия без какого-либо стресса, просто настройте его, и всё будет в несколько кликов. Как установить Чтобы установить gowap...

lorsrf

LORSRF - 2.1 Lorsrf는 SSRF 또는 Out-of-band 리소스 로드 공격에 악용될 수 있는 매개변수를 식별하기 위해 설계된 강력한 웹 침투 테스트 도구입니다. Burp Collaborator와 같은 OAST 호스트를 매개변수 값에 추가함으로써 Lorsrf는 대상에 대한 실제 정보 없이 Burp Collaborator에서 수신되는 HTTP 요청을 생성할 수 있습니다. 이 문제를 해결하기 위해 Lorsrf는 OAST 호스트에 변수로 특정 대상 정보 조각을 추가할 수 있는 기능을 포함합니다. 이를 통해 취약한...

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

Тестирование на проникновение: от новичка до эксперта! Это руководство предназначено как для начинающих, так и для опытных специалистов по тестированию на проникновение. Оно охватывает все аспекты тестирования безопасности веб-приложений, включая фундаментальные концепции, настройку тестовых сред...

AWE

AWE: 動的Webペネトレーションテストのための適応型エージェント Akshat Singh Jaswal · Ashish Baghel NDSS LAST-X 2026 に採択 概要...

wingman

/|\ / | ...

zparty

Zparty Automated web penetration testing framework with loc...

Red-MIRROR: Agentic LLM-Based Autonomous Penetration Testing with Reflective Verification and Knowledge-Augmented Interaction

Web applications remain the dominant attack surface in cybersecurity, where vulnerabilities such as SQL injection, XSS, and business logic flaws continue to cause significant data breaches. While penetration testing is effective for identifying these weaknesses, traditional manual approaches are...

ApexPlanet-Task5-capstone-webapp-pentest

🛡️ Capstone Project — Web Application & Network Penetration Test...

Learn Ethical Hacking Online – A to Z Training Bundle 2019

Good news for you is that this week's THN Deals brings Ethical Hacking A to Z Bundle that let you get started regardless of your experience level. The Ethical Hacking A to Z Bundle will walk you through the very basic skills you need to start your journey towards becoming a professional ethical...

[Burp Co2] A collection of enhancements for Portswigger's popuplar Burp Suite web penetration testing tool

Co2 includes several useful enhancements bundled into a single Java-based Burp Extension. The extension has it's own configuration tab with multiple sub-tabs for each Co2 module. Modules that interact with other Burp tools can be disabled from within the Co2 configuration tab, so there is no need...

About the PHP code auditing and vulnerability digging a little thought-vulnerability warning-the black bar safety net

Here is the PHP code auditing and vulnerability discovery the idea to do a bit summary, is a personal point of view, there is something wrong place please point out. PHP vulnerabilities in a large part is from the programmer's own lack of experience, of course, and server configuration related, b...