Making Favicon.ico based Recon Great again !

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

OWASP Code Review Guide Web Repository

Awesome XSS Payloads

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

A Deliberately Insecure Web Application

EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference

The OWASP Vulnerable Web Applications Directory (VWAD) Project - OWASP Web Site

ScriptKKiddie's WebAppSec Testing or Web Application Security Testing based on OWASP is a repository that contains useful resources, & stuffs helpful for Web Application Penetration Testing. By @scriptkkiddie

Continuation of the ZAP Neonmarker add-on previously by Juha Kivekäs

A curated list of tools which you can use in Infosec!

Web applications info gatherer

Analyzes and fuzzes requests that are stored in Burp Suite's history

⚡ Conduct attacks based on information gathered from the OWASP ZAP API

Things to do while Hacking/Hunting in Web Applications

📦 general-purpose, "black box" CGI auditing tool (ARCHIVE)