Web Application Penetration Tester (WAPT) Notes

This repository contains writeups for Damn Vulnerable Web Application (DVWA).

Welcome to the Bug Hunter's Wordlists repository! 🐛🔍 This repository serves as a comprehensive collection of essential wordlists utilized by bug hunters, penetration testers, and security enthusiasts during their reconnaissance and vulnerability assessment processes.

Script that automates the installation of the main tools used for web application penetration testing and Bug Bounty.

A cross site scripting command and control notification server

CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit

Web Path Finder

GoFuzz is a simple and efficient open-source fuzzing scanner designed to discover directories and files on a target web server or application.

Nutek Terminal in Fedora. Look for macOS version in nutek-apple repo.

In the context of web application penetration testing, Google Dorks can be used to find vulnerabilities and sensitive information in websites. This involves searching for specific keywords or file types that can indicate the presence of vulnerabilities or sensitive information, such as login pages, database files, and backups.

ქართული Web Application Scanner დამწყები პენტესტერებისთვის

Sifter - All purpose penetration testing op-center

performs various mutations on IPv4 addresses, such as converting to binary, hex, octal, urlencoded, and more

web application penetration testing and security notes.

Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.

R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.

ELRO-Security is an advance & free WAF (Web Application Firewall), It is using to defend servers and especially websites around the internet. It is very easy to install and allow websites owner to add their own website via a web application interface which makes it accessible for almost everyone regardless of the level of codding.

A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.

Automated Penetration Testing