web-security

A tiny web auditor with strong opinions.

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

🐳 VMs are bloat. Dockerise your VAPT environment

Full-spectrum security assessment tool for opencode — defensive code audit (17 vulnerability categories) + offensive penetration testing (63 attack categories, 15 agents, 11 domains). AI-powered AppSec, red teaming, and pentesting for vibe-coded apps.

Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. 🐛🛡️

Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, coverage, no false positives, never quits early.

Study notes from PortSwigger's Web Security Academy

Super Repository streamlines package and tool installations on Linux. It combines a variety of packages, tools, and repositories from official sources. Using package managers like apt, snap, and pip3, it ensures smooth installations.

Professional penetration testing skills for Claude Code — structured offensive workflows for AD and web pentests.

A structured recon-only framework for bug bounty hunters, from DNS basics to JS mining, API discovery, and automation pipelines.

This Repository contains Docker image of Kali Linux (rolling)combined with the n8n Automation Platform and Redteam and CTF Solver Workflows

Ethical hacking 🧑‍💻 is the legal way of breaking into systems 💻 to check and improve their security 🔐. White-hat hackers 🤍 work with permission ✅ to find and fix problems 🛠️ before bad hackers 🕵️‍♂️ exploit them. It helps in pen testing 🧪, risk checks ⚠️, and securing networks 🔒.

Acunetix Target Management Tool is a command-line utility designed for streamlined target scanning with Acunetix. It offers features like group management, initiating group scans, and real-time Telegram bot notifications.

Detection toolkit for the SC 4.0.3 self-healing WordPress malware - read-only scanner, mu-plugin tripwire, IoCs, and the eradication order that actually works.

A lightweight 'Encoded cURL' wrapper for encoding payloads in pentesting automation and custom scripts

RabbitHole – Universal, role-based cybersecurity environment manager. Auto-installs full toolsets for OSINT, Bug Bounty, Pentesting, Red Team, Blue Team, DFIR, and Threat Intelligence across Linux distros and Docker. Safe, modular, and fully auditable.

Automated installer and configuration script for Acunetix v25.1 on Linux.

Presidio security-hardened enhancements and defaults for Flask applications

Stage Two containers of OWASP PurpleTeam

Мини‑утилита для GeoIP‑lookup из терминала и обогащения данных, как плагина, для BurpSuit. Работает через curl с jq на бесплатном API ip-api.com (без ключа), а также с ipapi-co провайдером.