web-security-tool

A modern, console-based web penetration testing toolkit with a TUI. Features an HTTP/HTTPS proxy, active/passive vulnerability scanner, Repeater, Intruder, Spider, and more. Free & open-source.

A Flask-based phishing detection platform for analyzing URLs, emails, and SMS messages using a rule-based risk assessment engine.

Burp Suite extension for HTTP verb tampering testing using Montoya API.

aplikasi manajemen keamanan web berbasis PHP modular berkinerja tinggi yang dirancang untuk melindungi aplikasi web dari berbagai ancaman siber (seperti SQL Injection, XSS, RCE, LFI/RFI)

URLUNIQ 2.0 is an advanced offline URL normalization, canonicalization, deduplication, classification, filtering, analysis, and reporting toolkit built for security researchers, bug bounty hunters, and large URL datasets.

Turn Burp Suite XML dumps into compact, LLM-ready Markdown reports.

Write-ups from PortSwigger Web Security Academy labs: SQL Injection, XSS, and more as I progress

An automated SQL injection testing to uncover backend database vulnerabilities

Amba2Pen is a Python-based tool designed to streamline the penetration testing process by automating various pentest tasks.

Air-gapped LLM-assisted web application pentest triage — Burp Suite extension + local Ollama + ChromaDB semantic memory. MIT licensed.

Didaktisches Web-Security & HTTP-Header Audit-Framework (227 Punkte) mit nativer Zero-Regex-Engine für maximale Performance & ReDoS-Schutz. Bietet tiefe Kontext-Risikomatrix (diverse Seitentypen), Soft-404-Entrapment, WAF/CDN-Fingerprinting, automatische .htaccess-Direktiven und vollständige DSGVO-Konformität (In-Memory/No-DB).

Real-time URL threat intelligence Chrome extension with 12 client-side security checks.

XSS Injection Scanner is an automated security testing tool designed to detect Cross-Site Scripting (XSS) vulnerabilities in web applications