Awesome GitHub RepositoriesWeb Application Penetration Testing

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

Strix is an automated security research and vulnerability scanning platform that leverages language models to orchestrate complex security analysis tasks. It functions as a comprehensive framework for penetration testing and continuous security integration, allowing users to embed automated vulnerability research directly into development pipelines or execute it within isolated, containerized environments. The platform distinguishes itself through a multi-agent orchestration engine that coordinates specialized autonomous agents to perform parallel security assessments. By integrating LLM-agno

Micro8 is a security auditing knowledge base and penetration testing resource library. It serves as a curated collection of guides and documentation focused on vulnerability assessment. The project provides educational content and study guides for manual source code review, domain escalation, and internal network auditing. It includes a toolkit of reference materials for analyzing network traffic logs and identifying brute-force patterns. The library covers technical domains including web penetration testing and privilege escalation. It organizes these materials through PDF-based knowledge r

This tool is a command-line utility designed for automated web resource discovery, fuzzing, and application structure mapping. It functions as a security-focused scanner that identifies hidden files, directories, parameters, and virtual hosts by injecting payloads into HTTP requests. By systematically testing how servers handle various inputs, it assists in mapping the architecture of web applications and uncovering potential security vulnerabilities. The tool distinguishes itself through a highly concurrent engine that manages asynchronous request execution and recursive job orchestration. I

Zphisher is a security testing framework designed for conducting authorized social engineering assessments and penetration testing. It functions as a credential harvesting simulator that enables security professionals to evaluate organizational defenses and user awareness by deploying deceptive login interfaces. The platform automates the creation of realistic web pages through dynamic template rendering and provides tools to mask destination addresses. It integrates reverse proxy tunneling to expose local testing services to the public internet, allowing for remote access during security aud

OWASP ZAP is a dynamic application security testing tool and intercepting HTTP proxy used to find vulnerabilities in web applications. It functions as a penetration testing framework that enables both automated security scanning and manual security testing of running web services. The tool provides a suite of capabilities for analyzing web applications from the outside in, including the ability to capture and modify traffic between a browser and a target application. It is designed to integrate into DevSecOps pipelines to provide consistent security checks across different environments.

XSStrike is an automated security scanning engine designed for web application discovery, input

DVWA is a vulnerable web application sandbox and PHP security training environment. It serves as a deployable penetration testing target and an OWASP Top 10 lab designed for practicing exploits and simulating common web security vulnerabilities. The application allows users to adjust security difficulty levels to match their skill level and toggle between different SQL database engines to test how various systems handle injection attacks. It includes a mechanism to disable authentication, enabling automated security tools to interact directly with the environment. The project provides capabi

DVWA is a vulnerable web application lab and penetration testing sandbox designed to simulate common security flaws. It serves as a training platform for the OWASP Top 10 security risks and functions as a PHP and MySQL security lab for practicing the identification and exploitation of web vulnerabilities. The project provides a graduated learning experience through configurable security levels that adjust the difficulty of the vulnerabilities. It also supports switching between different database engines to research how various storage systems respond to injection attacks. The application is

BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It functions as a platform for security professionals to evaluate client-side defenses by injecting persistent scripts into web browsers, establishing a bidirectional communication channel for remote command execution and data exfiltration. The framework distinguishes itself through its ability to use compromised browser sessions as proxies to conduct internal network reconnaissance, effectively bypassing perimeter security controls. It utilizes an event-driven control interface and

The Web Application Security Testing Guide is an open-source security testing standard and comprehensive framework of procedures for identifying vulnerabilities in web applications and services. It serves as a vulnerability assessment methodology and a web API security audit framework, providing a structured approach for conducting consistent and thorough security audits of web-based software. The project utilizes a methodology-based audit framework and checklist-driven workflows to ensure repeatable discovery and exploitation steps. It organizes security tests through taxonomy-based vulnerab

fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a fuzzing payload dictionary, a resource discovery wordlist, and a fault injection dataset containing corrupted Unicode, null bytes, and escape codes to trigger application crashes and logic errors. The project includes a security filter bypass list featuring polyglots and encoded strings to evade web application firewalls and input validation filters. It also provides a comprehensive web application penetration testing dataset specifically for identifying flaws such as cross-s

fuzzDicts is a repository of curated wordlists and dictionaries designed for web application fuzzing. It provides collections of strings and payloads used to discover hidden files, subdomains, and security vulnerabilities. The project includes specialized libraries for different security testing vectors, such as dictionaries for common request and cookie parameters, lists of common subdomain prefixes, and collections of passwords and default vendor credentials for brute-force testing. It also maintains a security payload library containing character sequences used to identify flaws like SQL i

HowToHunt is a bug bounty hunting knowledge base and a structured guide for web application penetration testing. It provides a research methodology for organizing security testing procedures and validating application behaviors against known vulnerability patterns. The project features a curated library of security flaws and reconnaissance techniques. It organizes security testing into modular playbooks, checklists, and categorical vulnerability mappings to align specific exploitation techniques with target weaknesses. The repository covers a systematic sequence of information gathering task

HackTools is a browser extension pentesting toolkit designed for offensive security professionals. It serves as a centralized collection of tools for generating payloads, managing penetration testing workflows, and accessing security reference materials within a web-based interface. The project provides specialized utilities for generating attack strings for XSS, SQL injection, and reverse shells to identify and exploit web vulnerabilities. It includes a data encoding and hashing utility to convert information between various formats for the purpose of bypassing security filters or verifying

Arjun is an HTTP parameter discovery tool that identifies valid parameters on web endpoints by testing large dictionaries of parameter names against target URLs. It systematically probes endpoints using GET, POST, JSON, and XML request formats to find which parameters the server accepts, and can detect parameters whose values appear reflected in the response body. The tool distinguishes itself through its multi-method scanning approach, passive parameter collection from public archives like OTX and CommonCrawl, and its ability to detect value-sensitive parameters that only trigger a response

sqli-labs ist eine Sammlung absichtlich verwundbarer Webanwendungen und Sandbox-Umgebungen, die für das Üben der Identifizierung und Ausnutzung von SQL-Injection-Schwachstellen entwickelt wurden. Es dient als Cybersicherheits-Labor, in dem Benutzer in einer kontrollierten Umgebung mit Datenbank-Exploits experimentieren können. Die Umgebung bietet spezialisierte Module zum Testen einer breiten Palette von Angriffsvektoren, einschließlich fehlerbasierter, boolean-blinder und zeitbasierter Injections. Sie deckt spezifisch fortgeschrittene Techniken wie Second-Order-Injections, Stacked Queries und Angriffe auf HTTP-Header ab. Das Projekt enthält zudem Übungen, die sich auf die Umgehung von Sicherheitsfiltern und Web Application Firewalls durch Techniken wie Kommentar-Stripping und Impedance Mismatch konzentrieren. Diese Szenarien ermöglichen die Simulation von realen Penetrationstests und Audits der Datenbanksicherheit.

Learn-Web-Hacking ist ein strukturierter Studienleitfaden für Web-Sicherheit und eine Wissensdatenbank für Penetration Testing. Es bietet eine Sammlung von Forschungsnotizen, die sich auf die Identifizierung und Ausnutzung von Schwachstellen in Webanwendungen und Netzwerkprotokollen konzentrieren. Das Projekt enthält spezialisierte Frameworks zur Bewertung von Sicherheitsrisiken in Large Language Models, um Prompt-Injection zu verhindern, sowie Leitfäden zur Härtung von Cloud-Native-Infrastrukturen, einschließlich Container-Standards und Orchestrierungstools. Es deckt zudem die Analyse von Identitätsstandards und Authentifizierungsprotokollen ab. Das Material umfasst ein breites Spektrum an Sicherheitsaspekten, darunter Netzwerkprotokollanalyse, Informationsbeschaffung für das Mapping der Angriffsfläche und internes Netzwerk-Penetration-Testing inklusive Lateral Movement und Persistenz. Zudem werden Verteidigungsstrategien wie Zero-Trust-Architekturen und Intrusion Detection detailliert beschrieben.

Dalfox is an automated web application security tool specifically designed for discovering and verifying cross-site scripting vulnerabilities. It functions as an XSS vulnerability scanner that analyzes HTTP parameters and DOM structures to identify reflected, stored, and blind injection points. The project distinguishes itself by providing a Model Context Protocol server and a REST API, allowing artificial intelligence agents and remote interfaces to trigger and manage security scans programmatically. It utilizes a payload mutation engine and fingerprinting strategies to execute WAF evasion t

AntSword ist ein plattformübergreifender Web-Manager und ein Penetration-Testing-Framework für die zentrale Verwaltung mehrerer Remote-Website-Umgebungen. Es fungiert als Tool für die Remote-Website-Administration und als Web-Shell-Management-Tool, mit dem Benutzer diverse Webserver von einer einzigen Schnittstelle aus organisieren und steuern können. Das Projekt bietet ein Toolkit für Sicherheitsforscher, um autorisierte Sicherheitsaudits durchzuführen und Schwachstellen zu identifizieren. Es unterstützt Workflows für Web-Penetrationstests und Sicherheitsforschung, um das Verhalten von Webanwendungen zu analysieren und potenzielle Exploits zu entdecken. Das System deckt umfassende Funktionen in der Remote-Website-Administration und dem plattformübergreifenden Web-Management ab und ermöglicht die Ausführung administrativer Aufgaben und Sicherheitsüberprüfungen über verschiedene Betriebssysteme und Hosting-Plattformen hinweg.