Web Security
375 items from qazbnm456/awesome-web-security ★13,892
-
mitmproxy github.com
An interactive, SSL-capable man-in-the-middle proxy for HTTP with a console interface
-
-
-
Gitleaks github.com
A SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos.
-
acra github.com
Network encryption proxy to protect database-based applications from data leaks: strong selective encryption, SQL injections prevention, intrusion detection system.
-
PayloadsAllTheThings github.com
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-
CyberChef github.com
-
-
DOMPurify github.com
-
-
PhpSploit github.com
Full-featured C2 framework which silently persists on webserver via evil PHP oneliner. Built for stealth persistence, with many privilege-escalation & post-exploitation features.
-
-
SpiderFoot github.com
-
js-xss github.com
-
emanuele-em/proxelar github.com
A MITM Proxy 🦀! Toolkit for HTTP/1, HTTP/2, and WebSockets with SSL/TLS Capabilities
-
Darkmoon github.com
Open-source (GPLv3) autonomous AI penetration-testing CLI with 50 specialist agents and 140+ offensive tools over MCP for DAST-style web and API security assessment.
-
Raccoon github.com
A high performance offensive security tool for reconnaissance and vulnerability scanning.
-
XSStrike github.com
-
prowler github.com
-
OWASP Juice Shop github.com
-
Photon github.com
-
plasma github.com
-
OpenRASP github.com
An open source RASP solution actively maintained by Baidu Inc. With context-aware detection algorithm the project achieved nearly no false positives. And less than 3% performance reduction is observed under heavy server load.
-
pompelmi github.com
Node.js file-upload malware scanner with MIME sniffing, ZIP-bomb protection and optional YARA rules.
-
beef github.com
-
webshell github.com
-
wpscan github.com
-
FuzzDB github.com
-
-
wfuzz github.com
- next page of items loading…
