portswigger

Burp Suite Certified Practitioner Exam Study

HTTP Request Smuggling Detection Tool

#新手入门#Roadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)

Writeups for PortSwigger WebSecurity Academy

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CONF-04, OTG-CONFIG-004)

A collection of solutions for every PortSwigger Academy Lab (in progress)

Scripts for solving WebSecurity Academy labs of PortSwigger using Python

A cheatsheet for common JavaScript sources and sinks that lead to potential vulnerabilities.

Scripts for solving WebSecurity Academy labs of PortSwigger using Rust

My notes/solutions to the problems in "The Web Application Hacker's Handbook" (https://portswigger.net/web-security/web-application-hackers-handbook)

Solutions from @PortSwigger labs

#安全#It is a burpsuite introduction and these are 5 lab I performed in Burpsuite.

Writeups & Walkthroughs of various CTF challenges and boxes

#安全#Writeups for Portswigger penetration testing labs

This is my space for practicing portswigger labs and web vulnerabilities

This repository contains a python package named 'burplabs' which is an PortSwigger's Web Security Academy labs soluction in the form of python script. Each script includes the lab's name, proxy settin...

Burp bridge to FFUF

A blind SQL injection script that uses binary search aka bisection method to dump datas from database.

A BurpSuite extention to upload the sitemap to a notion database to organize which endpoint need to be tested.