websec 开源项目推荐（46 个）

Nekmo /dirhunt

Find web directories without bruteforce

deibit /cansina

Web Content Discovery Tool

security-prince /Application-Security-Engineer-Interview-Questions

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

l4wio /CTF-challenges-by-me

Pwnable|Web Security|Cryptography CTF-style challenges

devploit /XORpass

Encoder to bypass WAF filters using XOR operations.

devploit /debugHunter

Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Built for bug bounty and pentesting.

VainlyStrain /Vailyn

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

doyensec /CSPTPlayground

CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).

security-prince /Resources-for-Application-Security

Some good resources for getting started with application security

tyki6 /MyJWT

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

devploit /put2win

Script to automate PUT HTTP method exploitation to get shell

1diot9 /MyJavaSecStudy

在Java安全学习过程中的笔记和代码

gbiagomba /Sherlock

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

rastating /xss-chef

A web application for generating custom XSS payloads

ItsIgnacioPortal /Hacker-Scoper

CLI tool for filtering URLs/IPs with automatically-updated Bug Bounty program scope rules.

ostr-io /ostrio-docs

▲ SEO Middleware • Web Analytics • Web CRON • WebSec • HTTP & SNMP Monitoring • ostr.io is a unified web-services platform

rahulrajpl /netizenship

a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.

SecuringTheStack /tutorials

Additional Resources For Securing The Stack Tutorials

umair9747 /4oFour

A tech enumeration toolkit focused on 404 Not found pages.

Crypto-Cat /cryptocat-gitbook

OLD repo for my GitBook (CTF writeups / vuln research / bugbounty) - please check out cryptocat.me/blog for the updated content!