TOOLS FOR WEB APPLICATION HACKING

[MoonL1gth Emerald Member Posts:96 Threads:63 Reputation 0]

Hi, how are you guys! I bring you a list of tools for hacking web applications

- Burp Suite - Framework.
- ZAP Proxy - Framework.
- Dirsearch - HTTP bruteforcing.
- Nmap - Port scanning.
- Sublist3r - Subdomain discovery.
- Amass - Subdomain discovery.
- SQLmap - SQLi exploitation.
- Metasploit - Framework.
- WPscan - WordPress exploitation.
- Nikto - Web server scanning.
- HTTPX - HTTP scanning.
- Nuclei - YAML-based template scanning.
- FFUF - HTTP scanning.
- Subfinder - Subdomain discovery.
- Masscan - Mass IP and port scanning.
- Lazy Recon - Subdomain discovery.
- XSS Hunter - Blind XSS discovery.
- Aquatone - HTTP based reconnaissance.
- LinkFinder - Endpoint discovery via JS files.
- JS-Scan - Endpoint discovery via JS files.
- GAU - Historical mapping of attack surfaces.
- Parameth - Bruteforce GET and POST parameters.
- truffleHog - Find credentials in GitHub commits.

[CICI DF Member Posts:2 Threads:1 Reputation 0]

Guys, does anyone sell webshell?
If you have any, you can contact me TG: @Buerfy

[liquidka0s626 DF Member Posts:12 Threads:0 Reputation 0]

thanks for sharing