Find web directories without bruteforce
-
Updated
Oct 29, 2023 - Python
Find web directories without bruteforce
🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
🎯 CSV Injection Payloads
🎯 Directory Payload List
Pwnable|Web Security|Cryptography CTF-style challenges
Encoder to bypass WAF filters using XOR operations.
Script to automate PUT HTTP method exploitation to get shell
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
Some good resources for getting started with application security
A cli for cracking, testing vulnerabilities on Json Web Token(JWT)
Additional Resources For Securing The Stack Tutorials
A web application for generating custom XSS payloads
CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.
▲ SEO Middleware • Web Analytics • Web CRON • WebSec • HTTP & SNMP Monitoring • ostr.io is a unified web-services platform
Discover hidden debugging parameters and uncover web application secrets
Add a description, image, and links to the websec topic page so that developers can more easily learn about it.
To associate your repository with the websec topic, visit your repo's landing page and select "manage topics."