Skip to content

RichMix/webAppEx

Repository files navigation

Personal DB of challenge tools

Overview

WebAppExploitation is a comprehensive repository designed for learning and practicing techniques used in the exploitation of web applications. It contains resources, scripts, payloads, and tutorials to understand common and advanced web application vulnerabilities.


Features

  • Payloads and Exploits: Predefined scripts and payloads for common web vulnerabilities like SQL Injection, XSS, CSRF, RCE, and more.
  • Automated Tools: Python scripts and other utilities for automating repetitive web exploitation tasks.
  • Walkthroughs and Tutorials: Step-by-step dump logs from challenges to look through as walkthroughs once challenge information has been removed

Getting Started

Prerequisites

Ensure you have the following installed on your system:

  • Python 3.8+
  • Popular penetration testing tools:
    • Burp Suite
    • SQLmap
    • Dirbuster
  • A Linux-based environment (recommended: Kali Linux)

Installation

  1. Clone the repository:
    git clone https://github.com/yourusername/WebAppExploitation.git
    cd WebAppExploitation
    
     Set up dependencies:
    
     pip install -r requirements.txt
    

Usage

Explore the available scripts and resources:

Payloads Directory: Contains ready-to-use payloads for various attacks.

cd payloads/

Tools Directory: Automated scripts for common web app exploits.

cd tools/ python3 exploit_example.py

Labs Directory: Vulnerable web apps to practice on:

cd labs/

Contributing

Contributions are welcome! Please follow these steps:

Fork the repository.
Create a feature branch:

git checkout -b feature/YourFeature

Commit your changes:

git commit -m "Add your feature"

Push to your branch:

git push origin feature/YourFeature

Submit a pull request.

License

This repository is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).

About

Tools for Web App Exploitation Challenges

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published