webpentesting

Autonomous AI-powered security scanner — multi-agent vulnerability detection, exploitation, and validation engine

Advanced CORS Header Checker Tool with Vulnerability Detection and Bypass Attempts

Web Path Finder

A fully automated subdomain reconnaissance and sensitive data discovery toolkit.

CRLF Bug scanner for WebPentesters and Bugbounty Hunters

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

BurpFlow is one of the best Burp Suite automation tools for bug bounty hunters and penetration testers, widely used to load recon data via proxy and streamline web application security testing workflows.

Lightweight Python reconnaissance scanner for service fingerprinting, subdomain discovery, web vulnerabilities, and security misconfigurations

The simplest way to integrate your subdomain enum outputs with Burp Pro (Fast Crawler)

This repository contains learning resources for students.

Subdomain enumeration tool

Web pentest kickstarter

ADVANCED INJECTION POINT AND VULNERABILITY SCANNER

A script for finding some web vulnerabilities

Passive Recon Suite — Harvest URLs, discover subdomains, filter live endpoints and extract parameters from public archives & OSINT sources.

A collection of notes, walkthroughs, and lessons from my journey through the TryHackMe Offensive Pentesting Path as I build practical skills through hands-on labs.

This tool is use to search for some hidden directories on any website that generally they don't allow to look in but can be found as very important for exploiter.