GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Build software better, together

#

webappsec

Star

Here are 52 public repositories matching this topic...

Language: All
Filter by language
All 52 Python 15 HTML 9 TypeScript 4 JavaScript 3 Java 2 C 1 C# 1 CSS 1 Go 1 PHP 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

sqlmapproject / sqlmap

Sponsor
Star 38.9k

Automatic SQL injection and database takeover tool

python database detection dbms sql-injection pentesting exploitation appsec webappsec sqlinjection security-testing api-security database-security webapp-security security-testing-tool
  • Updated Nov 12, 2026
  • Python

devanshbatham / FavFreak

Sponsor
Star 1.3k

Making Favicon.ico based Recon Great again !

osint hacking web-security recon bugbounty bughunting information-gathering webappsec reconnaissance
  • Updated Aug 29, 2023
  • Python

bl4de / security-tools

Star 923

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

python scanner static-analysis hacking bug-bounty infosec pentesting ctf bugbounty ctf-tools webappsec security-tools itsecurity bug-bounties security-testing
  • Updated Apr 22, 2026
  • Python

zaproxy / community-scripts

Star 898

A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

scripts tips appsec webappsec dast zaproxy
  • Updated Nov 2, 2026
  • JavaScript

olacabs / jackhammer

Star 738

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

security static-code-analysis penetration-testing dynamic-analysis application-security wordpress-security mobile-security vulnerability-management vulnerability-scanners security-scanner vulnerability-assessment network-security webappsec vulnerability-scanning source-code-analysis penetration-testing-framework security-vulnerability-assessment
  • Updated Mar 18, 2024
  • Java

security-prince / Application-Security-Engineer-Interview-Questions

Star 690

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

xss vulnerability infosec application-security interview-questions appsec webappsec sdlc websecurity devsecops security-engineering websec websecurity-reference security-team security-engineer-interview
  • Updated Aug 7, 2020
bulwark

softrams / bulwark

Star 187

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

nodejs angular express typescript application-security pentesting typeorm bugbounty appsec vulnerability-management vulnerability-assessment red-team webappsec security-tools vulnerability-report blue-team vulnerability-research security-tool penetration-testing-tools
  • Updated Jun 3, 2026
  • TypeScript

OWASP / www-project-code-review-guide

Sponsor
Star 155

OWASP Code Review Guide Web Repository

guide owasp codereview appsec webappsec webappsecurity
  • Updated Jun 22, 2022
  • HTML

thomaspatzke / WASE

Sponsor
Star 114

The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

elasticsearch pentesting burp burp-plugin webappsec
  • Updated Oct 27, 2020
  • Python

OWASP / www-project-vulnerable-web-applications-directory

Sponsor
Star 95

The OWASP Vulnerable Web Applications Directory Project (VWAD) is a comprehensive and well maintained registry of all known vulnerable web applications currently available.

owasp appsec webappsec vulnerable-web-app vulnerable-web-application vulnerable-applications
  • Updated Oct 13, 2026
  • HTML

Dhamuharker / Xss-

Star 83

Awesome XSS Payloads

xss webappsec security-tools
  • Updated Feb 24, 2016

zaproxy / zaproxy-website

Star 83

The source of ZAP website

security website opensource appsec hacktoberfest security-scanner webappsec dast zaproxy
  • Updated Nov 11, 2026
  • HTML

snsttr / diwa

Star 73

A Deliberately Insecure Web Application

training education security practice hacking xss brute-force-attacks learn sql-injection csrf infosec web-security webappsec security-threats owasp-top-10 session-fixation sensitive-data-exposure session-hijacking local-file-inclusion path-traversal
  • Updated Jan 9, 2020
  • PHP

DeathShotXD / Comment2Shell

Star 67

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker

wordpress exploit xss poc rce bug-bounty infosec nuclei webshell webappsec web-exploitation web-application-security security-research zeroday pre-auth zero-click nuclei-templates cve-2026-93485
  • Updated Nov 8, 2026
  • Python

VainlyStrain / Vaile

Star 65

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

osint scanner python3 enumeration pentesting scanning exploitation exploitation-framework vulnerability-scanners webappsec web-pentest web-application-security reconnaissance pentest-tool vulnerability-analysis penetration-testing-framework information-disclosure tidos-framework
  • Updated Dec 16, 2020
  • Python

ekoparty / ekolabs

Star 50

EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference

networking pentesting security-vulnerability scanning webapps webappsec security-tools
  • Updated Aug 31, 2022

scriptkkiddie / WebAppSec-Testing

Sponsor
Star 16

ScriptKKiddie's WebAppSec Testing or Web Application Security Testing based on OWASP is a repository that contains useful resources, & stuffs helpful for Web Application Penetration Testing. By @scriptkkiddie

pentesting webappsec web-application-security website-hacking webapp-security webapp-pentesting webappsecurity webapppentesting webapphacking websitehacking web-app-hacking scriptkkiddie
  • Updated Aug 19, 2021

AdityaBhatt3010 / OWASP-Automated-Threats-to-Web-Applications-OATv2

Sponsor
Star 13

OWASP Automated Threats (OATv2) concise guide, highlighting real-world exploit methods, attacker motives and associated bug bounty values.

security web owasp cybersecurity webappsec owasp-top-10 owasp-top-ten cybersecurity-education
  • Updated Apr 19, 2025

kingthorin / neonmarker

Star 13

Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs

zap pentesting pentest appsec hacktoberfest webappsec pentest-tool dast zaproxy pentesting-tools
  • Updated Nov 2, 2026
  • Java
webmap

fagci / webmap

Star 9

Web applications info gatherer

webappsec pentest-tool webappsecurity
  • Updated Sep 9, 2021
  • Python

Add this topic to your repo

To associate your repository with the webappsec topic, visit your repo's landing page and select "manage topics."

Learn more

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.