This is a website penetration testing tool for testing webdav server vulnerabilities.

Aplicação Python com interface gráfica que permite configurar regras de interceptação para modificar parâmetros de requisições HTTP. Quando o navegador envia uma requisição para uma rota configurada, o proxy intercepta, modifica apenas os parâmetros especificados e encaminha a requisição mantendo todos os outros parâmetros originais.

Web Pentesting

rep+ — Burp-style HTTP Repeater for Firefox DevTools with Auth Analyzer and built-in AI to explain requests and suggest attacks

Actionable, multi-language OWASP Web Security Testing Guide (WSTG) checklists.

Some powerful templates for nuclei

Serverside Template Injection (SSTI) RCE - THM challenge "whiterose"

Extract secret from js files

Highly optimized HTTP brute force engine in Go featuring many interesting and facilitating abilities

A stack-agnostic web application penetration testing checklist based on OWASP WSTG, ASVS, PTES & NIST.

Cybersecurity Student from Bihar, India 🇮🇳 | Linux User 🐧 | Web Pentesting | Python & Bash Scripting | Ethical Hacking | Learning to break things — the right way.

A professional penetration testing report sample analyzing vulnerabilities in the OWASP Juice Shop.

Professional web pentesting methodology based on OWASP standards. Structured workflow from reconnaissance to reporting. Enterprise-grade testing framework.

A task & file management application vulnerable to several attacks

Web Pentesting Toolkit — recon, SQLi, XSS, dir bruteforce & subdomain enumeration

Automated web pentesting framework for detecting SQLi, XSS, CSRF, insecure cookies, and SSL misconfigurations.

os.system("descripcion")

This repository is a comprehensive collection of security tools designed for penetration testing, vulnerability scanning, and ethical hacking. The tools are organized into various categories, such as: XSS Injection: Tools to identify and exploit Cross-Site Scripting (XSS) vulnerabilities in web applications.

My notes and hands-on exercises from the TCM Security Practical Bug Bounty course, covering web application testing, common vulnerabilities, exploitation techniques, and security best practices.

Personal TryHackMe write-ups, notes and methodologies covering web application penetration testing, vulnerability discovery, exploitation and remediation.