web-attacks

Hacking tools pack & backdoors generator.

Using Socks4/5 or http proxies to make a multithreading Http-flood/Https-flood (cc) attack.

Modular, checkpoint-resumable scripts that build a vulnerable Active Directory lab (ad.lab forest) for authorized pentesting practice. One PowerShell script per VM, idempotent across reboots. Authorized testing only.

LulzDDOS TOOL- powerful DDoS toolkit for penetration tests

Automated Discovery of Parsing Discrepancy Related Bypasses in Web Application Firewalls Using HTTP Request Fuzzing.

LAYER7 BEST FLOODING ( SIMPLE TOOL FOR WRITE PROTECT )

网站压力测试系统 (stresscc) 支持Telegram 控制，可帮助发现安全漏洞并优化网站性能。cc-test for own web site to find out security hole and system loading issue.

Attack Detection, Parameter Optimization and Performance Analysis in Enterprise Networks (ML Networks) for Intrusion Detection System IDS.

"Force Cannon" is a brute force tool made in ruby, that performs attacks on login forms using the POST method without robust filters or protections.

OCS-WAF: a Web Application Firewall based on anomaly detection using One-Class SVM classifier

Complete notes, challenge walkthroughs, and 20+ alert investigations for the LetsDefend.io SOC Analyst path. This covers SIEM, phishing analysis, web attack detection, malware triage, threat intelligence and Splunk.

With this program you can penetrate WordPress sites.

This package implement a WebShell for CGI and WSGI server.

A lightweight Blind XSS (Cross-Site Scripting) collector and payload server built with Flask

Reverse tabnabbing POC

A collection of lab reports submitted as part of the CSC435 (Computer Security) course at the Lebanese American University.

Install a WebShell on hardened and deployed WebScripts (using Apache and mod_wsgi).

http methods fuzzer