awesome-web-hacking

The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws

Hacking Web Apps: Detecting and Preventing Web Application Security Problems

Hacking Exposed Web Applications

SQL Injection Attacks and Defense

The Tangled WEB: A Guide to Securing Modern Web Applications

Web Application Obfuscation: '-/WAFs..Evasion..Filters//alert(/Obfuscation/)-'

XSS Attacks: Cross Site Scripting Exploits and Defense

The Browser Hacker’s Handbook

The Basics of Web Hacking: Tools and Techniques to Attack the Web

Web Penetration Testing with Kali Linux

Web Application Security, A Beginner's Guide

Hacking: The Art of Exploitation

Crypto 101 is an introductory course on cryptography

Metasploit Unleashed

Security Engineering

OpenSSL Cookbook

Learn and apply cryptographic techniques

A guide to the key concepts, terminology, and technologies of cybersecurity perfect for anyone planning or implementing a security strategy

Kickstart a career in cyber security by learning how to adapt your existing technical and non-technical skills

A book about cryptographic techniques and Secret Key methods

This practical book is a one-stop guide to implementing a robust application security program

Practical guide to cyber threat hunting

Bug Bounty Bootcamp

Hacking APIs

A book about building web apps that are ready for and resilient to any attack

Open Web Application Security Project

Penetration Testing Execution Standard

Dr. Thorsten Schneider’s Binary Auditing

Application Security Wiki is an initiative to provide all Application security related resources to Security Researchers and developers at one place

Deepinfo Attack Surface Platform discovers all your digital assets, monitors them 24/7, detects any issues, and notifies you quickly so you can take immediate action

OSINT search engine that provides fresh data about the entire web, storing all data in its own DB, interconnect finding data and has some cool features

World's most used penetration testing software

Online subdomains scanner service with lots of additional data. works using OSINT

https://github.com/bjeborn/basic-auth-pot

HTTP Basic Authentication honeyPot

Web Application Security Scanner Framework

https://github.com/sullo/nikto

Nikto web server scanner

Nessus Vulnerability Scanner

Burp Intruder is a tool for automating customized attacks against web apps

The world's most advanced Open Source vulnerability scanner and manager

https://github.com/iSECPartners/Scout2

Security auditing tool for AWS environments

Is a multi threaded java application designed to brute force directories and files names on web/application servers

The Zed Attack Proxy is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications

https://github.com/tecknicaltom/dsniff

dsniff is a collection of tools for network auditing and penetration testing

https://github.com/WangYihang/Webshell-Sniper

Manage your webshell via terminal

https://github.com/DanMcInerney/dnsspoof

DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response

https://github.com/trustedsec/social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec

https://github.com/sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

https://github.com/beefproject/beef

The Browser Exploitation Framework Project

w3af is a Web Application Attack and Audit Framework

https://github.com/espreto/wpsploit

WPSploit, Exploiting Wordpress With Metasploit

https://github.com/WangYihang/Reverse-Shell-Manager

Reverse shell manager via terminal

https://github.com/RUB-NDS/WS-Attacker

WS-Attacker is a modular framework for web services penetration testing

https://github.com/wpscanteam/wpscan

WPScan is a black box WordPress vulnerability scanner

Paros proxy

Web Scarab proxy

Skipfish, an active web application security reconnaissance tool

Acunetix Web Vulnerability Scanner

CyStack Web Security Platform

IBM Security AppScan

Netsparker web vulnerability scanner

HP Web Inspect

https://github.com/sensepost/wikto

Wikto - Nikto for Windows with some extra features

Samurai Web Testing Framework

Ratproxy

Websecurify

Grendel-scan

Directory/file and DNS busting tool written in Go

Wfuzz

wapiti

https://github.com/neuroo/grabber

Grabber

Vega

Watcher passive web scanner

x5s XSS and Unicode transformations security testing assistant

AVDS Vulnerability Assessment and Management

Golismero

IKare

N-Stalker X

Nexpose

App Spider

ParosPro

Qualys Web Application Scanning

Retina

Xenotix XSS Exploit Framework

https://github.com/future-architect/vuls

Vulnerability scanner for Linux, agentless, written in golang

https://github.com/rastating/wordpress-exploit-framework

A Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems

XSS Payloads to leverage XSS vulnerabilities, build custom payloads, practice penetration testing skills

https://github.com/joaomatosf/jexboss

JBoss (and others Java Deserialization Vulnerabilities) verify and EXploitation Tool

https://github.com/commixproject/commix

Automated All-in-One OS command injection and exploitation tool

https://github.com/pathetiq/BurpSmartBuster

A Burp Suite content discovery plugin that add the smart into the Buster!

https://github.com/GoSecure/csp-auditor

Burp and ZAP plugin to analyze CSP headers

https://github.com/ffleming/timing_attack

Perform timing attacks against web applications

https://github.com/lalithr95/fuzzapi

Fuzzapi is a tool used for REST API pentesting

https://github.com/owtf/owtf

Offensive Web Testing Framework (OWTF)

https://github.com/nccgroup/wssip

Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa

https://github.com/PalindromeLabs/STEWS

Tool suite for WebSocket discovery, fingerprinting, and vulnerability detection

https://github.com/tijme/angularjs-csti-scanner

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS (ACSTIS)

A source code analysis tool for detecting and managing Java security vulnerabilities

Web app for transforming binary data and strings, including hashes and various encodings. GPLv3 offline version available

A "Cyber Swiss Army Knife" for carrying out various encodings and transformations of binary data and strings

https://github.com/urbanadventurer/WhatWeb

WhatWeb - Next generation web scanner

Shodan - The search engine for find vulnerable servers

https://github.com/WangYihang/Webshell-Sniper

A webshell manager via terminal

https://github.com/nil0x42/phpsploit

PhpSploit - Full-featured C2 framework which silently persists on webserver via evil PHP oneliner

webhint - webhint is a customizable linting tool that helps you improve your site's accessibility, speed, cross-browser compatibility, and more by checking your code for best practices and common errors

gtfobins - GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

https://github.com/HightechSec/git-scanner

git-scanner - A tool for bug hunting or pentesting for targeting websites that have open repositories available in public

Complete list of Web pentesting tools

Cyclops is a novel browser that can detect vulnerability automatically

Cyclops is a web browser with XSS detection feature

Web proxy

https://github.com/assetnote/kiterunner

API discovery

https://github.com/owasp-amass/amass

domain recon

Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API

BadUSB Script To Exfiltrate Passwords

Extracts all saved passwords from Chrome, Firefox, and Edge to be saved onto secondary USB for further analysis

https://github.com/flibustier/jwt-online-cracker

Brute-force HS256, HS384 or HS512 JWT Token from your browser (fully client-side)

XSS cheatsheet

LFI Cheat Sheet

Reverse Shell Cheat Sheet

SQL Injection Cheat Sheet

Path Traversal Cheat Sheet: Windows

official OWASP ZAP

-

-

-

-

-

-

-

-

-

-

-

-

-

-

Docker for pentest

-

The Modern Port Scanner

-

Common Vulnerabilities and Exposures. The Standard for Information Security Vulnerability Names

The Exploit Database – ultimate archive of Exploits, Shellcode, and Security Papers

Inj3ct0r is the ultimate database of exploits and vulnerabilities and a great resource for vulnerability researchers and security professionals

Since its inception in 1999, SecurityFocus has been a mainstay in the security community

Global Security Resource

WPScan Vulnerability Database

Vulnerability DB, Detailed information and remediation guidance for known vulnerabilities

Database of hundreds of TLS cipher suites and their security status

An index of exploit proof-of-concept code in Git repositories

Cybersecurity learning platform, with about 100 tutorials, approximately 25 of them are about web hacking & defending websites

Offensive Security Advanced Web Attacks and Exploitation (live)

Sans SEC542: Web App Penetration Testing and Ethical Hacking

Sans SEC642: Advanced Web App Penetration Testing and Ethical Hacking

Open Security Training

Security Exploded Training

World’s largest Infosec and Hacking Portal

Free class for web security by

Zero-Hero style Pentesting course by

Acunetix ASP test and demonstration site

Acunetix ASP.Net test and demonstration site

Acunetix PHP test and demonstration site

Crack Me Bank

Zero Bank

Altoro Mutual

Firing Range is a test bed for automated web application security scanners

XSS challenge

Google Gruyere, web application exploits and defenses

Pentest-Ground is a free playground with deliberately vulnerable web applications and network services

is a GPT created by in which chatGPT 4 acts as a hacking CTF. This GPT will ask for your experience level and what you would like to improve on, before simulating a machine/application for you to hack into, using the chatbox as the place to input terminal commands. Since this is through AI, it changes and adjust based on your experience level and you can ask for help if you are stuck

Web Security Academy: Free Online Training from PortSwigger

Developing Instructional Laboratories for Computer SEcurity EDucation

Virtual Machines for Localhost Penetration Testing

PentesterLab is an easy and great way to learn penetration testing

https://github.com/jerryhoff/WebGoat.NET

This web application is a learning platform about common web security flaws

Damn Vulnerable Web Application (DVWA)

LAMPSecurity Training

https://github.com/Audi-1/sqli-labs

SQLI labs to test error based, Blind boolean based, Time based

https://github.com/paralax/lfi-labs

small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

Build, host and share vulnerable web apps in a sandboxed environment for free

Free live fire Capture the Flag, blue team, red team Cyber Warfare Range for beginners through advanced users. Must use a cell phone to send a text message requesting access to the range

https://github.com/adamdoupe/WackoPicko

WackoPicko is a vulnerable web application used to test web application vulnerability scanners

https://github.com/rapid7/hackazon

Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications

https://github.com/RhinoSecurityLabs/cloudgoat

Rhino Security Labs' "Vulnerable by Design" AWS infrastructure setup tool

Hack The Box is an online platform allowing you to test and advance your skills in cyber security

https://github.com/tegal1337/0l4bs

0l4bs is a Cross-site scripting labs for web application security enthusiasts

https://github.com/oliverwiegers/pentest_lab

Local pentest lab leveraging docker compose

LabEx is an online platform for enhancing your cyber security skills through hands-on labs

CyberPython helps you to make your own research in order to solve challenges, exploit CVEs and make good scripts

This service performs a deep analysis of the configuration of any SSL web server on the public Internet

SSL/TLS data provider service. Collect the data about digital certificates - issuers, organisation, whois, expiration dates, etc... Plus, has handy filters for convenience

Strong SSL Security on nginx

Weak Diffie-Hellman and the Logjam Attack

Let’s Encrypt is a new Certificate Authority: It’s free, automated, and open

A checker (site and tool) for CVE-2014-0160 (Heartbleed)

A command line tool which checks a website's TLS/SSL ciphers, protocols and cryptographic flaws

A static analysis security vulnerability scanner for Ruby on Rails applications

https://github.com/rubysec/ruby-advisory-db

A database of vulnerable Ruby Gems

https://github.com/rubysec/bundler-audit

Patch-level verification for Bundler

https://github.com/hakirisec/hakiri_toolbelt

Hakiri Toolbelt is a command line interface for the Hakiri platform

Scan Gemfile.lock for vulnerabilities

This page lists many query methods and options in ActiveRecord which do not sanitize raw SQL arguments and are not intended to be called with unsafe user input

https://github.com/0xsauby/yasuo

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network