Find web directories without bruteforce
-
Updated
Oct 29, 2023 - Python
#
websec
Here are 16 public repositories matching this topic...
Encoder to bypass WAF filters using XOR operations.
-
Updated
Jul 7, 2022 - Python
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
security penetration-testing rce pentesting exploitation information-leak vulnerability-detection takeover vulnerability-scanners vulnerability-assessment lfi directory-traversal websecurity pentest-tool websec lfi-exploitation local-file-inclusion path-traversal lfi-shells filter-evasion
-
Updated
Sep 25, 2021 - Python
A cli for cracking, testing vulnerabilities on Json Web Token(JWT)
python cli security jwt pypi jsonwebtoken pentesting ctf pentest blackarch security-tools websec root-me rootme blackarch-packages rawsec
-
Updated
Dec 4, 2025 - Python
a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.
information-retrieval cybersecurity infosec information-security information-gathering websecurity websec osint-python
-
Updated
Dec 8, 2022 - Python
Repository for my GitBook (CTF writeups / vuln research / bugbounty)
gitbook bug hacking cybersecurity bug-bounty infosec pwn ctf capture-the-flag binary-exploitation writeups ctftime appsec offsec websec exploit-development vulnerability-research
-
Updated
Dec 9, 2025 - Python
writeups/solvers for CTF challenges
-
Updated
Oct 6, 2025 - Python
The Clara S. Traversal's classroom is an intermediate level web security challenge (black box) where you will have to exploit both client-side and server-side vulnerability in order to change a student grade. Can you hack the class and get in? Access teacher only features? Do even more than the teacher can? Good luck!
-
Updated
Dec 15, 2024 - Python
Content Discovery/Directory Brute-forcing using Python3
-
Updated
Feb 22, 2024 - Python
Automatically exploit time-based blind SQL injection vulnerabilities
python exploit cybersecurity sqli sql-injection blind-sql-injection websecurity websec time-based-blind-sql-injection
-
Updated
Oct 4, 2022 - Python
A utility to test the success of xss payloads on a target website. Use responsibly.
-
Updated
Dec 8, 2022 - Python
Extract endpoints from stdin or files.
-
Updated
Sep 30, 2020 - Python
🤖 Telegram Bot written on Python for basic web-app analysis.
python security censys telegram telegram-bot python3 webapp cybersecurity scan-tool add-on security-tools websecurity web-application-security searchsploit websec web-analysis telegram-security cybersecurity-tools basic-web-analysis web-app-analysis
-
Updated
Jun 14, 2025 - Python
Improve this page
Add a description, image, and links to the websec topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the websec topic, visit your repo's landing page and select "manage topics."