Find web directories without bruteforce
-
Updated
Oct 29, 2023 - Python
#
websec
Here are 46 public repositories matching this topic...
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
xss vulnerability infosec application-security interview-questions appsec webappsec sdlc websecurity devsecops security-engineering websec websecurity-reference security-team security-engineer-interview
-
Updated
Aug 7, 2020
Pwnable|Web Security|Cryptography CTF-style challenges
-
Updated
Jun 23, 2023 - CSS
Encoder to bypass WAF filters using XOR operations.
-
Updated
Jul 7, 2022 - Python
Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Built for bug bounty and pentesting.
javascript chrome-extension penetration-testing debug bug-bounty web-security browser-extension pentesting ctf recon bugbounty security-tools reconnaissance websec hacking-tools
-
Updated
Feb 4, 2026 - JavaScript
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
security penetration-testing rce pentesting exploitation information-leak vulnerability-detection takeover vulnerability-scanners vulnerability-assessment lfi directory-traversal websecurity pentest-tool websec lfi-exploitation local-file-inclusion path-traversal lfi-shells filter-evasion
-
Updated
Sep 25, 2021 - Python
CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
-
Updated
Mar 31, 2025 - JavaScript
Some good resources for getting started with application security
owasp infosec application-security ctf php-security appsec infosec-reference web-hacking websecurity security-engineering websec websecurity-reference appsec-tutorials
-
Updated
Jun 2, 2021
A cli for cracking, testing vulnerabilities on Json Web Token(JWT)
python cli security jwt pypi jsonwebtoken pentesting ctf pentest blackarch security-tools websec root-me rootme blackarch-packages rawsec
-
Updated
Oct 21, 2026 - Python
Script to automate PUT HTTP method exploitation to get shell
-
Updated
Jun 25, 2020 - Shell
This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)
security security-audit sherlock cybersecurity web-security cyber-security security-scanner red-team security-automation security-tools websecurity web-sec-scanner security-testing red-team-engagement redteaming websec redteam red-teaming security-team
-
Updated
Feb 14, 2026 - Shell
A web application for generating custom XSS payloads
-
Updated
Dec 29, 2019 - JavaScript
CLI tool for filtering URLs/IPs with automatically-updated Bug Bounty program scope rules.
go shell golang security tool filter scopes enumeration infosec pentesting recon bugbounty bugcrowd hackerone security-tools websecurity websec
-
Updated
Jul 3, 2026 - Go
▲ SEO Middleware • Web Analytics • Web CRON • WebSec • HTTP & SNMP Monitoring • ostr.io is a unified web-services platform
monitoring analytics snmp seo web-analytics sms-notifications privacy-policy gdpr websecurity websec prerendering webcron web-cron ccpa down-detector
-
Updated
May 13, 2026
a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.
information-retrieval cybersecurity infosec information-security information-gathering websecurity websec osint-python
-
Updated
Dec 8, 2022 - Python
Additional Resources For Securing The Stack Tutorials
-
Updated
Sep 9, 2018 - JavaScript
A tech enumeration toolkit focused on 404 Not found pages.
linux osint cybersecurity penetration-testing bug-bounty bounty infosec pentesting recon bugbounty ethical-hacking websecurity reconnaissance websec webappsecurity cybersecurity-tools
-
Updated
Oct 6, 2024 - Go
OLD repo for my GitBook (CTF writeups / vuln research / bugbounty) - please check out cryptocat.me/blog for the updated content!
gitbook bug hacking cybersecurity bug-bounty infosec pwn ctf capture-the-flag binary-exploitation writeups ctftime appsec offsec websec exploit-development vulnerability-research
-
Updated
Dec 30, 2025
Add this topic to your repo
To associate your repository with the websec topic, visit your repo's landing page and select "manage topics."