A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Most advanced XSS scanner.

E-mails, subdomains and names Harvester - OSINT

fsociety Hacking Tools Pack – A Penetration Testing Framework

Credentials recovery project

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Common User Passwords Profiler (CUPP)

A python script that finds endpoints in JavaScript files

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Automatic SSRF fuzzer and exploitation tool

Offensive Software Exploitation Course

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Unleash the power of cloud

The Credential Mapper

A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

ShodanX is a tool to gather information of targets using shodan dorks⚡.

🚀 XSSFUZZ - A tool for detecting XSS vulnerabilities in web applications.