An HTTP/HTTPS intercept proxy written in Go.

A cross-platform python based utility for information gathering and penetration testing automation!

Go Web Application Penetration Test

Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations

INE/eLearnSecurity Web Application Penetration Tester (eWPTv2) Notes

A reinforced version of the Wavsep evaluation platform.

Automated and Modular Shell Script to Automate Security Vulnerability Scans

A curated set of offensive security notes on vulnerabilities, techniques, and tools

A Burp Suite extension to help you track your assessment progress

WordPress WPS Hide Login <1.9.1 - Information Disclosure

This is a tool used by several security researchers to find Open Redirect Bug

CVE-2020-27838 - KeyCloak - Information Exposure

Apache Superset - Authentication Bypass

WebSafeHub - Vulnerable Web App

WordPress Contact Form 7 - Unrestricted File Upload

Plesk Obsidian <=18.0.49 - Open Redirect

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

SpiderFlow Crawler Platform - Remote Code Execution

Apache <= 2.4.48 Mod_Proxy - Server-Side Request Forgery