This tool downloads, installs, and configures a shiny new copy of Chromium.

编写 burp suite 插件

Burp Suite icon font

Web Penetration Testing with Kali Linux - Third Edition, published by Packt

Web Uygulama Güvenlik Duvarı Projesi

https://chiomasrepo.github.io/pentest-notes/

Burp Suiteドキュメント日本語訳

In this repository, I discuss the CSRF vulnerability and how to do execute a CSRF attack.

A simple tool that converts Burpsuite requests into Python for replicating in the Requests library

This is a project to perform a BRUTE FORCE attack on a self hosted website to better the understanding of the importance of cybersecurity.

Burp HTTP history browser (bhhb) - A tool to view HTTP history exported from Burp Suite Community Edition

🔐🕸️ A writeup containing solutions of Portswigger's Web Security Academy

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Este proyecto es una herramienta web diseñada para generar pruebas de concepto (PoC) de ataques CSRF (Cross-Site Request Forgery) a partir de una petición HTTP completa. Es útil para investigadores de seguridad-

Hands-on Vulnerability Assessment & Pentesting Lab using DVWA hosted on Metasploitable and attacked from Kali Linux. Simulates OWASP Top 10 web vulnerabilities like SQLi, XSS, CSRF, and more using real-world tools such as SQLmap, Hydra, Burp Suite, and manual exploitation. Includes report, screenshots, and attack walkthroughs.

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Unpacked DOM Invader Chrome extension for easy installation and use outside Burp Suite empowering bug bounty hunters and web security researchers.

I'm creating a safer digital world. Every vulnerability I find is one less threat to someone’s data, privacy, or business. I’m building bridges of trust in a world full of uncertainty, and turning risks into resilience. My work might be behind the scenes, but its impact protects millions.

Educational pentesting lab – Red Team exercises with Kali Linux, Metasploitable2, Nessus, Burp Suit, Wireshark, tcpdump, Nmap, Metasploit Framework, SET, Hydra, sqlmap, aircrack-ng and vulnerable apps. Step-by-step reports, commands, and captures.