webpentest

All In One Web Recon

Autonomous AI-powered security scanning platform — CLI scanner, web dashboard, and one-command Docker deployment

Autonomous AI-powered security scanner — multi-agent vulnerability detection, exploitation, and validation engine

Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern

Advanced CORS Header Checker Tool with Vulnerability Detection and Bypass Attempts

Web Path Finder

This course uses a deliberately vulnerable banking application to demonstrate common security vulnerabilities, their impact, and how to fix them. The application is built with Flask (backend) and React (frontend).

Open source self-hosted cyber security learning platform

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

Whitepass Bypass Whitelist/Ratelimit Implementations in Web Applications/APIs

Web application pentesting recon

The CyberTalents repository is a collection of solutions and write-ups for challenges sourced from the CyberTalents platform. Organized topic, this repository serves as a resource for cybersecurity enthusiasts seeking to enhance their skills and understanding of security concepts.

🎓 Roadmap to conquer PortSwigger Web Security Academy labs — SQLi, XSS, CSRF & more 🛡️🕵️‍♂️

A Simple Tool to gather information from any website, domain, sub-domain, DNS, links by enumeration with simple commands.

Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests

This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides information, methodology and resources to perform subdomain takeover attacks.

A powerful recon tool

Fast web content discovery tool written in Go. Automatically filters false positives using Jaro-Winkler similarity — no matchers or filters needed.

The simplest way to integrate your subdomain enum outputs with Burp Pro (Fast Crawler)

Lightweight Python reconnaissance scanner for service fingerprinting, subdomain discovery, web vulnerabilities, and security misconfigurations