Automated NoSQL database enumeration and web application exploitation tool.

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

The Offensive Manual Web Application Penetration Testing Framework.

Janusec Application Gateway, Provides Fast and Secure Application Delivery. JANUSEC应用网关，提供快速、安全的应用交付。

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

A cross-platform python based utility for information gathering and penetration testing automation!

h2t (HTTP Hardening Tool) scans a website and suggests security headers to apply

PHP Security Check List [ EN ] 🌋 ☣️

🎯 XML External Entity (XXE) Injection Payload List

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

🎯 RFI/LFI Payload List

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

Sqreen's Application Security Management for the Go language

Metasploit-like pentest framework derived from TIDoS (https://github.com/0xInfection/TIDoS-Framework)

An application to catch, search and analyze HTTP secure headers.

PHP extension for web-application dynamic analysis.

a shell script aim to automatically launch 50+ online web scanning tools in the Browsaer against a target domain in a 10 waves

An ultra-compact intro (or refresher) to Web Application Security.

Host Header Injection Scanner

The Unified Web Administration Portal for Janusec Application Gateway (an application security solution which provides Web Application Firewall, unified web administration portal, private key protection, web routing and scalable load balancing).

📚 VPS 🔒 Network 🔒 Cloud 🔒 Web Applications 📚

Security Tool which scans a target using OpenVAS, Zap, and Nexpose. And consolidates the scan result.

Information Security Library

F5 Agility Labs for Web Application Firewall Use Cases

Web Application Penetration Testing tools and Materials for Ethical Hackers.

📚 🐳 For DevOps Engineers 🐳 📚

🐶 A curated list of Web Security materials and resources.

A python module for red teams to support the continuous recon of JavaScript files and HTML script blocks in an active web application.

ELRO-Security is an advance & free WAF (Web Application Firewall), It is using to defend servers and especially websites around the internet. It is very easy to install and allow websites owner to add their own website via a web application interface which makes it accessible for almost everyone regardless of the level of codding.

.NET packages for using Sqreen