Find web directories without bruteforce
-
Updated
Oct 29, 2023 - Python
#
websec
Here are 44 public repositories matching this topic...
đźš« Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.
go http security tool pentesting ctf bugbounty pentest bypass reconnaissance 403 websec waf-bypass 403-bypass
-
Updated
Jun 27, 2025 - Go
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
xss vulnerability infosec application-security interview-questions appsec webappsec sdlc websecurity devsecops security-engineering websec websecurity-reference security-team security-engineer-interview
-
Updated
Aug 7, 2020
Pwnable|Web Security|Cryptography CTF-style challenges
-
Updated
Jun 23, 2023 - CSS
Encoder to bypass WAF filters using XOR operations.
-
Updated
Jul 7, 2022 - Python
Discover hidden debugging parameters and uncover web application secrets
-
Updated
Oct 27, 2023 - JavaScript
🎯 CSV Injection Payloads
security csv bug-bounty bugbounty payload payloads websecurity websec code-security bugbountytips payloadbox csv-injection csv-exploit csv-payload csv-payloads
-
Updated
Jul 18, 2024
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
security penetration-testing rce pentesting exploitation information-leak vulnerability-detection takeover vulnerability-scanners vulnerability-assessment lfi directory-traversal websecurity pentest-tool websec lfi-exploitation local-file-inclusion path-traversal lfi-shells filter-evasion
-
Updated
Sep 25, 2021 - Python
🎯 Directory Payload List
awesome directory bug-bounty fuzzing fuzz-testing awesome-list web-security bugbounty payload payloads fuzz websecurity web-security-research websec websecurity-reference payload-list web-secure payloadbox directory-payload directory-list
-
Updated
Jul 18, 2024
Some good resources for getting started with application security
owasp infosec application-security ctf php-security appsec infosec-reference web-hacking websecurity security-engineering websec websecurity-reference appsec-tutorials
-
Updated
Jun 2, 2021
CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
-
Updated
Mar 31, 2025 - JavaScript
A cli for cracking, testing vulnerabilities on Json Web Token(JWT)
python cli security jwt pypi jsonwebtoken pentesting ctf pentest blackarch security-tools websec root-me rootme blackarch-packages rawsec
-
Updated
Jun 10, 2025 - Python
Script to automate PUT HTTP method exploitation to get shell
-
Updated
Jun 25, 2020 - Shell
This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
security security-audit sherlock cybersecurity web-security cyber-security security-scanner red-team security-automation security-tools websecurity web-sec-scanner security-testing red-team-engagement redteaming websec redteam red-teaming security-team
-
Updated
Sep 23, 2024 - Shell
A web application for generating custom XSS payloads
-
Updated
Dec 29, 2019 - JavaScript
▲ SEO Middleware • Web Analytics • Web CRON • WebSec • HTTP & SNMP Monitoring • ostr.io is a unified web-services platform
monitoring analytics snmp seo web-analytics sms-notifications privacy-policy gdpr websecurity websec prerendering webcron web-cron ccpa down-detector
-
Updated
Sep 12, 2025
a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.
information-retrieval cybersecurity infosec information-security information-gathering websecurity websec osint-python
-
Updated
Dec 8, 2022 - Python
Additional Resources For Securing The Stack Tutorials
-
Updated
Sep 9, 2018 - JavaScript
CLI tool for filtering URLs/IPs with automatically-updated Bug Bounty program scope rules.
go shell golang security tool filter scopes enumeration infosec pentesting recon bugbounty bugcrowd hackerone security-tools websecurity websec
-
Updated
Sep 19, 2025 - Go
Improve this page
Add a description, image, and links to the websec topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the websec topic, visit your repo's landing page and select "manage topics."