Web Hacker's Weapons

A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Category

• Weapons
  • Main Weapon
  • Subdomain Enumeration
  • Fetch path and host
  • Port scanner
  • Web Discovery
  • Web Vulnerability Scanner
  • XSS
  • CSRF
  • Path traversal / Directory traversal / LFI
  • Command Injection
  • SQL Injection
  • NoSQL Injection
  • SSRF
  • CORS Misconfiguration
  • WebSocket
  • Cloud Security
  • Utility for hackers
  • Online tools
• Contribute

Weapons

Main Weapon

Name	Description	Popularity	Language	Metadata

Fetch path and host

Name	Description	Popularity	Language	Metadata
httprobe	Take a list of domains and probe for working HTTP and HTTPS servers

SQL Injection

Name	Description	Popularity	Language	Metadata
sqlmap	Automatic SQL injection and database takeover tool

CORS Misconfiguration

Name	Description	Popularity	Language	Metadata
Corsy	CORS Misconfiguration Scanner

Subdomain Enumeration

Name	Description	Popularity	Language	Metadata
Amass	In-depth Attack Surface Mapping and Asset Discovery

Port scanner

Name	Description	Popularity	Language	Metadata
masscan	TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

XSS

Name	Description	Popularity	Language	Metadata
XSStrike	Most advanced XSS scanner.

Path traversal / Directory traversal / LFI

Name	Description	Popularity	Language	Metadata

Command Injection

Name	Description	Popularity	Language	Metadata

CSRF

Name	Description	Popularity	Language	Metadata

NoSQL Injection

Name	Description	Popularity	Language	Metadata
NoSQLMap	Automated NoSQL database enumeration and web application exploitation tool.

SSRF

Name	Description	Popularity	Language	Metadata

Cloud Security

Name	Description	Popularity	Language	Metadata
s3reverse	The format of various s3 buckets is convert in one format. for bugbounty and security testing.

Web Discovery

Name	Description	Popularity	Language	Metadata
Arjun	HTTP parameter discovery suite.

Web Vulnerability Scanner

Name	Description	Popularity	Language	Metadata
Silver	Mass scan IPs for vulnerable services

WebSocket

Name	Description	Popularity	Language	Metadata

Utility for hackers

Name	Description	Popularity	Language	Metadata
ftc	simple copy to file to clipboard

Usage of weapon-md

./weapon-md
Usage of ./weapon-md:
  -isFirst
    	if you add new type, it use
  -url string
    	github / gitlab / bitbucket url

Three Procedures for the Contribute

• First, generate markdown code using weapon-md

$ ./weapon-md -url https://github.com/hahwul/xspear
| [xspear](https://github.com/hahwul/xspear) | Powerfull XSS Scanning and Parameter analysis tool&gem | ![](https://img.shields.io/github/stars/hahwul/xspear) | ![](https://img.shields.io/github/languages/top/hahwul/xspear) | ![](https://img.shields.io/github/repo-size/hahwul/xspear)<br>![](https://img.shields.io/github/license/hahwul/xspear) <br> ![](https://img.shields.io/github/forks/hahwul/xspear) <br> ![](https://img.shields.io/github/watchers/hahwul/xspear) |

• Second, Give me PR or Add issue with output code
  
• Third, There's no third.