web-application-security topic

The Offensive Manual Web Application Penetration Testing Framework.

0xInfection

h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply

gildasio

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

VainlyStrain

Automated NoSQL database enumeration and web application exploitation tool.

codingo

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

codingo

🎯 XML External Entity (XXE) Injection Payload List

payloadbox

Second-order subdomain takeover scanner

mhmdiaa

Extract pieces of info from a web page's Wayback Machine history

mhmdiaa

JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, Automatic ACME Certificate, WAF, 5-Second Shield, CC Defense, OAuth2 Authentication, Global Server...

Janusec

PHP Security Check List [ EN ] 🌋 ☣️

security-checklist