mmg1 Goto Github PK

web-app-penetration-testing-resources

This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.

web-application-cheatsheet

This cheatsheet is aimed at the CTF Players and Beginners to help them understand Web Application Vulnerablity with examples.

web-inf-dict

List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.

web-sec-cheatsheet

web-security-fundamentals

👨‍🏫 Mike's Web Security Course

web-security-learning

Web-Security-Learning

webanalyze

Port of Wappalyzer (uncovers technologies used on websites) in Go to automate scanning.

webgrep

Web page Grep-like tool with additional features like JS deobfuscation and easy extensibility

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

webhacking

WebHacking checklist

webhunt

Web App bug hunting

weblogicpassworddecryptor

PowerShell script and Java code to decrypt WebLogic passwords

weblogicpassworddecryptorui

解密weblogic AES或DES加密方法

weblogicscan

Weblogic一键漏洞检测工具，V1.3

weblogicscanner

weblogic 漏洞扫描工具。目前包含 CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551

webscreenshot

A simple script to screenshot a list of websites

webshell

This is a webshell open source project

webshell-1

Webshell && Backdoor Collection

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

webshooter

Inspired by gowitness and EyeWitness

websocket-connection-smuggling-go

websocket-connection-smuggling write in go

websocket-fuzzer

Simple HTML5 WebSocket fuzzer

websphere-portlet-state-decoder

WebSphere Portlet State Decoder plugin for Burp

weevely3

Weaponized web shell

weffles

Build a fast, free, and effective Threat Hunting/Incident Response Console with Windows Event Forwarding and PowerBI

weirdaal

WeirdAAL (AWS Attack Library)

wep

A generator to weaponize Macro payloads that can evade EMET and utilises native VB migration.

wepwnise

WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.

wertrigger

Weaponizing for privileged file writes bugs with windows problem reporting

wesng

Windows Exploit Suggester - Next Generation