Find web directories without bruteforce

python security crawler dirscanner pentesting security-tools websec without-bruteforce

• Updated Oct 29, 2023
• Python

Web Content Discovery Tool

python security-audit pentesting websec

• Updated Jun 7, 2024
• Python

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

xss vulnerability infosec application-security interview-questions appsec webappsec sdlc websecurity devsecops security-engineering websec websecurity-reference security-team security-engineer-interview

• Updated Aug 7, 2020

Pwnable|Web Security|Cryptography CTF-style challenges

cryptography ctf-writeups ctf pwnable ctf-challenges websec

• Updated Jun 23, 2023
• CSS

Encoder to bypass WAF filters using XOR operations.

php pentesting bugbounty xor websec waf-bypass

• Updated Jul 7, 2022
• Python

Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Built for bug bounty and pentesting.

javascript chrome-extension penetration-testing debug bug-bounty web-security browser-extension pentesting ctf recon bugbounty security-tools reconnaissance websec hacking-tools

• Updated Feb 4, 2026
• JavaScript

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

security penetration-testing rce pentesting exploitation information-leak vulnerability-detection takeover vulnerability-scanners vulnerability-assessment lfi directory-traversal websecurity pentest-tool websec lfi-exploitation local-file-inclusion path-traversal lfi-shells filter-evasion

• Updated Sep 25, 2021
• Python

CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).

csrf websecurity websec appsec-testing cspt

• Updated Mar 31, 2025
• JavaScript

Some good resources for getting started with application security

owasp infosec application-security ctf php-security appsec infosec-reference web-hacking websecurity security-engineering websec websecurity-reference appsec-tutorials

• Updated Jun 2, 2021

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

python cli security jwt pypi jsonwebtoken pentesting ctf pentest blackarch security-tools websec root-me rootme blackarch-packages rawsec

• Updated Oct 21, 2026
• Python

Script to automate PUT HTTP method exploitation to get shell

bash pentesting websec

• Updated Jun 25, 2020
• Shell

在Java安全学习过程中的笔记和代码

java security websecurity websec javasecurity

• Updated Oct 11, 2026
• Java

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

security security-audit sherlock cybersecurity web-security cyber-security security-scanner red-team security-automation security-tools websecurity web-sec-scanner security-testing red-team-engagement redteaming websec redteam red-teaming security-team

• Updated Feb 14, 2026
• Shell

A web application for generating custom XSS payloads

react javascript security xss penetration-testing xss-exploitation websec xss-exploit

• Updated Dec 29, 2019
• JavaScript

CLI tool for filtering URLs/IPs with automatically-updated Bug Bounty program scope rules.

go shell golang security tool filter scopes enumeration infosec pentesting recon bugbounty bugcrowd hackerone security-tools websecurity websec

• Updated Jul 3, 2026
• Go

▲ SEO Middleware • Web Analytics • Web CRON • WebSec • HTTP & SNMP Monitoring • ostr.io is a unified web-services platform

monitoring analytics snmp seo web-analytics sms-notifications privacy-policy gdpr websecurity websec prerendering webcron web-cron ccpa down-detector

• Updated May 13, 2026

a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.

information-retrieval cybersecurity infosec information-security information-gathering websecurity websec osint-python

• Updated Dec 8, 2022
• Python

Additional Resources For Securing The Stack Tutorials

tutorials owasp cybersecurity infosec appsec secure-coding websec appsec-tutorials

• Updated Sep 9, 2018
• JavaScript

A tech enumeration toolkit focused on 404 Not found pages.

linux osint cybersecurity penetration-testing bug-bounty bounty infosec pentesting recon bugbounty ethical-hacking websecurity reconnaissance websec webappsecurity cybersecurity-tools

• Updated Oct 6, 2024
• Go

OLD repo for my GitBook (CTF writeups / vuln research / bugbounty) - please check out cryptocat.me/blog for the updated content!

gitbook bug hacking cybersecurity bug-bounty infosec pwn ctf capture-the-flag binary-exploitation writeups ctftime appsec offsec websec exploit-development vulnerability-research

• Updated Dec 30, 2025