webappsec

Making Favicon.ico based Recon Great again !

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

Awesome XSS Payloads

EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference

OWASP Code Review Guide Web Repository

A Deliberately Insecure Web Application

The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site

Web applications info gatherer

ScriptKKiddie's WebAppSec Testing or Web Application Security Testing based on OWASP is a repository that contains useful resources, & stuffs helpful for Web Application Penetration Testing. By @ScriptKKiddie

Analyzes and fuzzes requests that are stored in Burp Suite's history

⚡ Conduct attacks based on information gathered from the OWASP ZAP API

📦 general-purpose, "black box" CGI auditing tool (ARCHIVE)

Continuation of the Zaproxy Neonmarker addon previously by Juha Kivekäs

web application penetration testing and security notes.

Tool designed to find location of newly uploaded file when not given by the website.

l

Approov API Threat Protection integration with hCaptcha for Web Apps

Approov API Threat protection integration with FingerprintJS for Web Apps

Approov API Threat Protection integration with Google reCAPTCHA V3 for Web Apps

A curated list of tools which you can use in Infosec!

@kingthorin's profile repo

OWASP Foundation Web Respository for the Ottawa Ontario Chapter