Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
๐ถ A curated list of Web Security materials and resources.
GitHub stars and default-branch commits for qazbnm456/awesome-web-security.
122 repos currently saved from this list.
Open highlighted repo slot
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Minimal code to connect to a CEF debugger.
Offline-first, searchable arsenal for pentesting & bug bounty: payloads, a click-to-build command generator, GTFOBins, wordlists, embedded CyberChef, reverse shells, checklists & an engagement tracker.
A domain searcher named GoogleSSLdomainFinder - ๅบไบ่ฐทๆญSSL้ๆ่ฏไนฆ็ๅญๅๅๆฅ่ฏขๅทฅๅ ท
Your users download a 4GB AI model, the connection drops at 3.8GB, verifyfetch resumes from 3.8GB and verifies every byte. Drop-in integrity verification for Transformers.js, WebLLM, and any large file in the browser.
Parse NTLM challenge messages over HTTP and SMB
A simple tool to convert the IP to a DWORD IP
Git manager for pentesters
A whole bunch of public pentest reports & papers
Vulnerable Web applications Generator
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
vulnerable web application for training
A XSS mind map ;)
Security training for the apps you actually ship. Open your browser and start hacking.
documentation and writing
No description.
A script that inspects multi-byte character sets looking for characters with specific user-defined properties
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
๐ OSINT & Security Extensions for Marshall Browser - Installable plugins for enhanced reconnaissance and security testing
Privacy-first Chrome extension for real-time website security analysis using on-device AI. Trust scores (0-100), phishing detection, SSL verification, cookie compliance & AI chatbot powered by WebLLM with zero external data transmission.
Is this app legit? Check before you connect. Free URL security scanner for indie developers and AI builders. Live at trustscanpro.com
this can't keep happening
WebDecoy Bot Detection โ zero-config WordPress plugin for bot protection, spam prevention, and WooCommerce carding defense