Automatic SQL injection and database takeover tool
Making Favicon.ico based Recon Great again !
My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.
OWASP Code Review Guide Web Repository
The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch
The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.
The source of ZAP website
A Deliberately Insecure Web Application
Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)
EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference
Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker
ScriptKKiddie's WebAppSec Testing or Web Application Security Testing based on OWASP is a repository that contains useful resources, & stuffs helpful for Web Application Penetration Testing. By @scriptkkiddie
OWASP Automated Threats (OATv2) concise guide, highlighting real-world exploit methods, attacker motives and associated bug bounty values.
Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs
To associate your repository with the webappsec topic, visit your repo's landing page and select "manage topics."