SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

This is a webshell open source project

Anonymous email forwarding

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

Shopware 6 is an open commerce platform based on Symfony Framework and Vue and supported by a worldwide community and more than 3.100 community extensions

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

AWSGoat : A Damn Vulnerable AWS Infrastructure

A laboratory for learning secure web and mobile development in a practical manner.

AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters

Work in progress...

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules and undertake various security tasks, all accessible …

OpenSource Poc && Vulnerable-Target Storage Box.

Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.

Blackfire Player is a powerful Web Crawling, Web Testing, and Web Scraper application. It provides a nice DSL to crawl HTTP services, assert responses, and extract data from HTML/XML/JSON responses.

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

Cross-site scripting labs for web application security enthusiasts

PowerShell Empire Web Interface

Whitebox source code review cheatsheet (Based on AWAE syllabus)

少而精的常用字典，积累各种场景实现字典进化，只追求更简单更有效，不建议star，但建议pr。

xss.js.org

Vulnerable Code Snippets

Simple Bulk Scan Scheduler for Acunetix in PHP

The repo will contains code for web app exploiltation