An introduction to OWASP methodologies
-
Updated
Jul 5, 2019
#
webapplicationhacking
Here are 29 public repositories matching this topic...
Facebook Write-ups, PoC, and exploitation codes:
-
Updated
Jan 20, 2020
Extract domains/subdomains/FQDNs from files and URLs
hacking domains enumeration bug-bounty recon bugbounty subdomains reconnaissance webapplicationhacking webhacking
-
Updated
Jun 30, 2020 - Python
Automated Penetration Testing
python automation apt bruteforce owasp penetration-testing scans network-analysis kali-linux vulnerability-assessment network-security information-gathering portscanner webapplicationhacking penetration-testing-tools penetration-automation automation-penetration-testing
-
Updated
Aug 23, 2020 - Python
A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.
-
Updated
Nov 25, 2020
ELRO-Security is an advance & free WAF (Web Application Firewall), It is using to defend servers and especially websites around the internet. It is very easy to install and allow websites owner to add their own website via a web application interface which makes it accessible for almost everyone regardless of the level of codding.
security web waf web-security firewalls web-application-firewall web-application-security webapplication webapplicationhacking web-secure web-application-security-scanner
-
Updated
Nov 28, 2020 - Python
R3C0Nizer is the first ever CLI based menu-driven web application B-Tier recon framework.
cli workflow scripting pentesting scans recon bugbounty bughunting bash-scripting reconnaissance webapplicationhacking scanner-web bugbounty-tool
-
Updated
Apr 2, 2021 - Shell
Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.
-
Updated
Aug 4, 2021 - Python
web application penetration testing and security notes.
security penetration-testing pentesting webappsec web-penetration-testing webapplicationhacking webpentest penetration-testing-tools webappsecurity webapppentesting webapplicationsecurity
-
Updated
Oct 8, 2021 - Python
ქართული Web Application Scanner დამწყები პენტესტერებისთვის
-
Updated
Dec 7, 2022 - Python
GoFuzz is a simple and efficient open-source fuzzing scanner designed to discover directories and files on a target web server or application.
python scanner python3 cybersecurity penetration-testing fuzzing pentesting webapplicationhacking webfuzzer webapplicationsecurity
-
Updated
Sep 8, 2023 - Python
Web Path Finder
security web whois python3 pathfinder vulnerability whois-lookup web-pentest websecurity webapplicationhacking web-tools webpentest webapplicationsecurity webpentesting
-
Updated
Nov 22, 2023 - Python
CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit
security web proof-of-concept exploit penetration-testing bugbounty webapplicationhacking penetration-testing-tools bugbountytips applicati bugbounty-tool cve-2022-44268
-
Updated
Dec 29, 2023 - Python
-
Updated
Feb 19, 2024
Script that automates the installation of the main tools used for web application penetration testing and Bug Bounty.
linux bash tools ubuntu toolkit hacking bug-bounty bugbounty webapplication webapplicationhacking vps-setup hacking-tools vps-ubuntu bugbounty-tool webapplicationsecurity
-
Updated
Mar 29, 2024 - Shell
Welcome to the Bug Hunter's Wordlists repository! 🐛🔍 This repository serves as a comprehensive collection of essential wordlists utilized by bug hunters, penetration testers, and security enthusiasts during their reconnaissance and vulnerability assessment processes.
security wordlist cybersecurity brute-force ethical-hacking websecurity bug-hunting webapplicationhacking webapplicationsecurity allwordlists bugbounty-wordlist
-
Updated
May 17, 2024
Web Application Penetration Tester (WAPT) Notes
injection owasp webapp owasp-zap burpsuite owasp-top-10 injection-attacks webapplicationhacking wapt waptx broken-access-control portswigger-labs webapppentesting webapplicationsecurity webappplicationtesting webapppentest
-
Updated
Nov 9, 2024
AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.
docker open-source csharp dotnet penetration-testing bug-bounty asp-net-core appsec hacktoberfest owasp-top-10 contributions-welcome webapplicationhacking good-first-issue ai-security applicationsecurity productsecurity ai-red-team prompt-injection llm-security ai-red-teaming
-
Updated
Oct 29, 2025 - JavaScript
In the context of web application penetration testing, Google Dorks can be used to find vulnerabilities and sensitive information in websites. This involves searching for specific keywords or file types that can indicate the presence of vulnerabilities or sensitive information, such as login pages, database files, and backups.
recon vulnerability-scanners google-dorks dork reconnaissance webapplicationhacking bugbounty-tool bugbounty-tools google-dorking-tool google-dorking-payloads
-
Updated
Oct 29, 2025 - HTML
This repository contains writeups for Damn Vulnerable Web Application (DVWA). --------------------------------- Updated writeups and blogs are at: https://github.com/Aftab700/aftab700.github.io
security owasp cybersecurity ctf-writeups infosec ctf writeups writeup dvwa owasp-top-10 webapplicationhacking damn-vulnerable-web-application webapplicationsecurity dvwa-writeups
-
Updated
Jan 11, 2026 - HTML
Add this topic to your repo
To associate your repository with the webapplicationhacking topic, visit your repo's landing page and select "manage topics."