web-pentesting

This is a website penetration testing tool for testing webdav server vulnerabilities.

Aplicação Python com interface gráfica que permite configurar regras de interceptação para modificar parâmetros de requisições HTTP. Quando o navegador envia uma requisição para uma rota configurada, o proxy intercepta, modifica apenas os parâmetros especificados e encaminha a requisição mantendo todos os outros parâmetros originais.

Web Pentesting

rep+ — Burp-style HTTP Repeater for Firefox DevTools with Auth Analyzer and built-in AI to explain requests and suggest attacks

Actionable, multi-language OWASP Web Security Testing Guide (WSTG) checklists.

Some powerful templates for nuclei

Serverside Template Injection (SSTI) RCE - THM challenge "whiterose"

Extract secret from js files

Cybersecurity Student from Bihar, India 🇮🇳 | Linux User 🐧 | Web Pentesting | Python & Bash Scripting | Ethical Hacking | Learning to break things — the right way.

Highly optimized HTTP brute force engine in Go featuring many interesting and facilitating abilities

A professional penetration testing report sample analyzing vulnerabilities in the OWASP Juice Shop.

Professional web pentesting methodology based on OWASP standards. Structured workflow from reconnaissance to reporting. Enterprise-grade testing framework.

A stack-agnostic web application penetration testing checklist based on OWASP WSTG, ASVS, PTES & NIST.

Web Pentesting Toolkit — recon, SQLi, XSS, dir bruteforce & subdomain enumeration

A task & file management application vulnerable to several attacks

Cybersecurity and DevSecOps knowledge base — Linux administration, server hardening, Docker and web pentesting notes. Next.js + Nextra, deployed at omarsec.com.

My notes and hands-on exercises from the TCM Security Practical Bug Bounty course, covering web application testing, common vulnerabilities, exploitation techniques, and security best practices.

Personal TryHackMe write-ups, notes and methodologies covering web application penetration testing, vulnerability discovery, exploitation and remediation.

Automated web pentesting framework for detecting SQLi, XSS, CSRF, insecure cookies, and SSL misconfigurations.

Personal TryHackMe write-ups, notes and methodologies covering advanced web application exploitation, custom tooling, cryptographic attacks, vulnerability chaining and WAF bypass techniques.