Skip to content

Tools and notes for Web App Exploitation Challenges

License

Notifications You must be signed in to change notification settings

RichMix/webAppEx

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

65 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Personal DB of challenge tools

Overview

WebAppExploitation is a comprehensive repository designed for learning and practicing techniques used in the exploitation of web applications. It contains resources, scripts, payloads, and tutorials to understand common and advanced web application vulnerabilities.


Features

  • Payloads and Exploits: Predefined scripts and payloads for common web vulnerabilities like SQL Injection, XSS, CSRF, RCE, and more.
  • Automated Tools: Python scripts and other utilities for automating repetitive web exploitation tasks.
  • Walkthroughs and Tutorials: Step-by-step dump logs from challenges to look through as walkthroughs once challenge information has been removed

Getting Started

Prerequisites

Ensure you have the following installed on your system:

  • Python 3.8+
  • Popular penetration testing tools:
    • Burp Suite
    • SQLmap
    • Dirbuster
  • A Linux-based environment (recommended: Kali Linux)

Installation

  1. Clone the repository:
    git clone https://github.com/yourusername/WebAppExploitation.git
    cd WebAppExploitation
    
     Set up dependencies:
    
     pip install -r requirements.txt
    

Usage

Explore the available scripts and resources:

Payloads Directory: Contains ready-to-use payloads for various attacks.

cd payloads/

Tools Directory: Automated scripts for common web app exploits.

cd tools/ python3 exploit_example.py

Labs Directory: Vulnerable web apps to practice on:

cd labs/

Contributing

Contributions are welcome! Please follow these steps:

Fork the repository.
Create a feature branch:

git checkout -b feature/YourFeature

Commit your changes:

git commit -m "Add your feature"

Push to your branch:

git push origin feature/YourFeature

Submit a pull request.

License

This repository is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).

About

Tools and notes for Web App Exploitation Challenges

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published