Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is…
View More pyfiscan: Free web-application vulnerability and version scanner
hsecscan A security scanner for HTTP response headers. Installation Requirement: Python 2.x Usage Example Copyright (C) 2015 riramar Source: https://github.com/riramar/
View More hsecscan: A security scanner for HTTP response headers
WebGoat WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application…
View More [Collection] Some good Vulnerable Web application Lab for PenTester
BruteXSS is a tool written in python simply to find XSS vulnerabilities in the web application. This tool was originally developed by Shawar Khan in…
View More BruteXSS v1.5 – Cross-site Scripting Tool
WAFPASS Analysing parameters with all payloads’ bypass methods, aiming at benchmarking security solutions like WAF. Today a great number of website owners around the globe…
View More wafpass: Analysing parameters with all payloads’ bypass methods
A file upload point is an excellent opportunity to execute XSS applications. Many sites have user rights to upload personal data pictures of the upload…
View More File upload XSS – Vulnerabilities
WATABO is a security tool for testing web applications. It is intended to enable security professionals to perform efficient (semi-automated) web application security audits. Most…
View More WATOBO – THE WEB APPLICATION TOOLBOX
What is a local file inclusion (LFI) vulnerability? LFI allows an attacker to include a file on a server through a browser. When a Web…
View More WebApp Penetration Testing: Local File Inclusion (LFI)
Cross-site scripting (XSS) is a common vulnerability in Web vulnerability analysis. In many cases, it was easy to enter without filtering easily, but most of…
View More Bypass Cross-site scripting (XSS) filtering using HEX Encoding
Cross Site Scripting (Cross Site Scripting, XSS) is a Web application attack in the data output to the page when there is a problem, leading…
View More Cross site scripting (XSS) :Some techniques to bypass WAF