ParamSpider

paramspider Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing 📖 About • 🏗️ Installation • ⛏️ Usage • 🚀 Examples • 🤝 Contributing • About paramspider allows you to fetch URLs related to any domain or a list of domains from Wayback achives. It filters out "boring"...

ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can...

Trust-Decision-Security

Trust Decision Solver - Reverse Engineered This software lets you Generate infinite dynamic fingerprints Generate infinite TD pass tokens with no detection Some of the web securities flaws include: TLS fingerprint checks not present on token domain However TLS checks present on retail site domain...

BSCP-EXAM-GUIDE-BY-N3OARI-2026

README.MD MARCH 2026 This repo contains each cheatsheet along with its respective most important labs. Each topic includes its own cheatsheet/methodology, the most relevant labs, and useful resources. ⭐This is the result of months of work — I hope you find it helpful. If you do, please leave a...

Parth

Parth Scanner heuristique de paramètres vulnérables Introduction Certains noms de paramètres HTTP sont plus souvent associés à une fonctionnalité qu'à d'autres. Par exemple, le paramètre ?url= contient généralement des URLs comme valeur et est donc souvent victime d'attaques d'inclusion de fichie...

cybersecurity-interview-questions

Cybersecurity Interview Questions A Free, Open‑Source Collection for Red Team, Blue Team, Web Security, Incident Response & More Overview...

Burp-Suite-Certified-Practitioner-Exam-Study

Подготовка к экзамену Burp Suite Certified Practitioner Это мои учебные заметки по более чем 110 лабораторным работам PortSwigger Academy. Я использовал эти лабораторные работы, чтобы сдать экзамен Burp Suite Certified Practitioner 2023 года. Моя квалификация BSCP. Для получения дополнительной...

skipfish

=========================================== skipfish - web application security scanner http://code.google.com/p/skipfish/ Written and maintained by: Michal Zalewski [email protected] Niels Heinen [email protected] Sebastian Roschke [email protected] Copyright 2009 - 2012 Google In...

hacker101

Hacker101 Hacker101 is a free class for web security. Whether you're a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you. Getting Started Prerequisites Ruby Suggestion: use rbenv bundler Run gem install bundler, if needed...

SourceLeakHacker

Description SourceLeakHacker is a muilt-threads web directories scanner. Installation root@kitploit: pip install -r requirements.txt Usage root@kitploit: usage: SourceLeakHacker.py options optional arguments: -h, --help show this help message and exit --url URL url to scan, eg: 'http://127.0.0.1/...

oss-oopssec-store

OSS - OopsSec Store An intentionally vulnerable e-commerce app for learning web security. Master real-world attack vectors through a realistic CTF platform. Hunt for flags, exploit vulnerabilities, and level up your security skills. Docker Hub · npm · Roadmap · Walkthroughs · Contributing · Good...

OWASPWebGoatPHP

WebGoatPHP OWASP WebGoatPHP — это порт OWASP WebGoat на PHP и базы данных MySQL/SQLite. Цель — создать интерактивную учебную среду для безопасности веб-приложений, предлагая уроки в виде заданий. В каждом задании пользователь должен использовать уязвимость, чтобы продемонстрировать понимание...

CloudUnflare

CloudUnflare...

posta

Posta Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessage vulnerabilities, and includes features such as replaying messages sent between windows within any attached browser. Prerequisites Google Chrome / Chromium Node.js...

x8-Burp

This app is no longer supported The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections. Features...

beef

=============================================================================== root@kitploit: Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

raider

Быстрые ссылки Сайт. Страница OWASP. Документация. Установка. FAQ. Начало работы. Архитектура. Обсуждения. Issues. Twitter. Fediverse. Что такое Raider OWASP Raider был разработан с целью улучшить тестирование веб-аутентификации. Со временем он развился и теперь может использоваться для любых...

caido

Site web • Tableau de bord • Documentation • Feuille de route • Image de marque • Discord 👋 Bienvenue Bienvenue sur Caido ! Caido vise à aider les professionnels de la sécurité et les passionnés à auditer les applications web avec efficacité et facilité. Ici, vous pouvez participer au développeme...

NucleiFuzzer

NucleiFuzzer = Nuclei + Paramspider + waybackurls + gauplus + hakrawler + katana + Fuzzing Templates Overview NucleiFuzzer is an advanced automation tool designed to streamline and optimize web application security testing by integrating a suite of powerful URL discovery and vulnerability scannin...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner DSXS is a fully functional Cross-site scripting vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...