WebGoat WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application…
View More [Collection] Some good Vulnerable Web application Lab for PenTester
Introduce Cross-site request forgery [CSRF], also known as a one-click attack or session riding or Sea-Surf and abbreviated as CSRF or XSRF, is a type…
View More Finding and exploiting Cross-site request forgery (CSRF)
EasyCSRF helps to find weak CSRF-protection in WebApp which can be easily bypassed. For example, content type based protection for API (Rest API, GraphQL API,…
View More EasyCSRF: BurpSuite extension for Bypassing CSRF Protection
OWASP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication. The flow of the application is…
View More OWSAP Damn Vulnerable Web Sockets: vulnerable web application
Blazy Blazy is a modern login page bruteforcer. Features Easy target selections Smart form and error detection CSRF and Clickjacking Scanner Cloudflare and WAF Detector…
View More Blazy: the modern login page bruteforcer with CSRF, Clickjacking Scanner & WAF Detector
Understanding CSRF The Express team’s csrf and csurf modules frequently have issues popping up concerned about our usage of cryptographic functions. These concerns are unwarranted due to a misunderstanding…
View More What are CSRF tokens and how do they work?
Nikto is web server scanner which performs comprehensive tests against web servers for multiple items, including over 6500 potentially dangerous files/CGIs, checks for outdated versions…
View More Nikto – WebAPP Penetration Testing Tool
Vane is a vulnerability scanner that scans WordPress for all webmasters to scan for WordPress vulnerabilities and find and fix problems before they go live.…
View More Vane: open source WordPress Vulnerability Scanning Cross-site request forgery [CSRF], also known as one-click attack or session riding or Sea-Surf and abbreviated as CSRF or XSRF, is a type of malicious…
View More Cross Site Request Forgery [CSRF-XSRF] Vulnerability
On previous post, I did Intelligence Gathering phase. After gathering target info, i need to do Vulnerability Scanning. Run Auto-WebApp-PenTest.sh script, choose option 2 All tools on…
View More Auto Web Application Penetration Testing: Vulnerability Scanning