{"slug": "web-app", "title": "Web Application", "description": "Break that web application.", "sections": [{"title": "", "groups": [{"title": "CORS", "tools": [{"name": "Corsy", "url": "https://github.com/s0md3v/Corsy", "description": "CORS Misconfiguration Scanner.", "repo": "s0md3v/Corsy", "_anchor": "corsy", "_section": "", "_group": "CORS", "_tabs": ["cors"], "_tab_titles": ["CORS"], "_page": "/tools/corsy/"}]}, {"title": "Cross-Site Scripting", "tools": [{"name": "XSS'OR", "url": "https://github.com/evilcos/xssor2", "description": "XSS'OR - Hack with JavaScript.", "repo": "evilcos/xssor2", "_anchor": "xss-or", "_section": "", "_group": "Cross-Site Scripting", "_tabs": ["cross-site-scripting"], "_tab_titles": ["Cross-Site Scripting"], "_page": "/tools/xss-or/"}, {"name": "XSStrike", "url": "https://github.com/s0md3v/XSStrike", "description": "Most advanced XSS scanner.", "repo": "s0md3v/XSStrike", "_anchor": "xsstrike", "_section": "", "_group": "Cross-Site Scripting", "_tabs": ["cross-site-scripting"], "_tab_titles": ["Cross-Site Scripting"], "_page": "/tools/xsstrike/"}]}, {"title": "CRLF", "tools": [{"name": "CRLFSuite", "url": "https://github.com/Nefcore/CRLFsuite", "description": "The most powerful CRLF injection (HTTP Response Splitting) scanner.", "repo": "Nefcore/CRLFsuite", "_anchor": "crlfsuite", "_section": "", "_group": "CRLF", "_tabs": ["crlf"], "_tab_titles": ["CRLF"], "_page": "/tools/crlfsuite/"}]}, {"title": "CSRF", "tools": [{"name": "Bolt", "url": "https://github.com/s0md3v/Bolt", "description": "CSRF Scanner.", "repo": "s0md3v/Bolt", "_anchor": "bolt", "_section": "", "_group": "CSRF", "_tabs": ["csrf"], "_tab_titles": ["CSRF"], "_page": "/tools/bolt-web-app/"}]}, {"title": "Databases", "tools": [{"name": "sql-map", "url": "https://github.com/sqlmapproject/sqlmap", "description": "Automatic SQL injection and database takeover tool.", "repo": "sqlmapproject/sqlmap", "_anchor": "sql-map", "_section": "", "_group": "Databases", "_tabs": ["databases"], "_tab_titles": ["Databases"], "_page": "/tools/sql-map/"}]}, {"title": "Directory Traversal", "tools": [{"name": "dotdotpwn", "url": "https://github.com/wireghoul/dotdotpwn", "description": "The Directory Traversal Fuzzer.", "repo": "wireghoul/dotdotpwn", "_anchor": "dotdotpwn", "_section": "", "_group": "Directory Traversal", "_tabs": ["directory-traversal"], "_tab_titles": ["Directory Traversal"], "_page": "/tools/dotdotpwn/"}, {"name": "slipit", "url": "https://github.com/usdAG/slipit", "description": "Utility for creating ZipSlip archives.", "repo": "usdAG/slipit", "_anchor": "slipit", "_section": "", "_group": "Directory Traversal", "_tabs": ["directory-traversal"], "_tab_titles": ["Directory Traversal"], "_page": "/tools/slipit/"}]}, {"title": "Frameworks", "tools": [{"name": "Commix", "url": "https://github.com/commixproject/commix", "description": "Automated All-in-One OS Command Injection Exploitation Tool.", "repo": "commixproject/commix", "_anchor": "commix", "_section": "", "_group": "Frameworks", "_tabs": ["frameworks"], "_tab_titles": ["Frameworks"], "_page": "/tools/commix/"}, {"name": "TIDoS", "url": "https://github.com/0xInfection/TIDoS-Framework", "description": "HTTP Request Smuggling Detection Tool.", "repo": "0xInfection/TIDoS-Framework", "_anchor": "tidos", "_section": "", "_group": "Frameworks", "_tabs": ["frameworks"], "_tab_titles": ["Frameworks"], "_page": "/tools/tidos/"}, {"name": "tplmap", "url": "https://github.com/epinna/tplmap", "description": "Server-Side Template Injection and Code Injection Detection and Exploit Tool.", "repo": "epinna/tplmap", "_anchor": "tplmap", "_section": "", "_group": "Frameworks", "_tabs": ["frameworks"], "_tab_titles": ["Frameworks"], "_page": "/tools/tplmap/"}]}, {"title": "Headers", "tools": [{"name": "Security Headers", "url": "https://securityheaders.com/", "description": "Tool designed to help you better deploy and understand modern security features that are available for your website.", "_anchor": "security-headers", "_section": "", "_group": "Headers", "_tabs": ["headers"], "_tab_titles": ["Headers"], "_page": "/tools/security-headers/"}]}, {"title": "Protocols", "tools": [{"name": "http-request-smuggling", "url": "https://github.com/anshumanpattnaik/http-request-smuggling", "description": "HTTP Request Smuggling Detection Tool.", "repo": "anshumanpattnaik/http-request-smuggling", "_anchor": "http-request-smuggling", "_section": "", "_group": "Protocols", "_tabs": ["protocols"], "_tab_titles": ["Protocols"], "_page": "/tools/http-request-smuggling/"}]}, {"title": "SSL/TLS", "tools": [{"name": "TLS-Scanner", "url": "https://github.com/tls-attacker/TLS-Scanner", "description": "Assists in the evaluation of TLS Server configurations.", "repo": "tls-attacker/TLS-Scanner", "_anchor": "tls-scanner", "_section": "", "_group": "SSL/TLS", "_tabs": ["ssl-tls"], "_tab_titles": ["SSL/TLS"], "_page": "/tools/tls-scanner/"}]}, {"title": "LFI", "tools": [{"name": "LFISuite", "url": "https://github.com/D35m0nd142/LFISuite", "description": "Automated scan and exploitation of Local File Inclusion.", "repo": "D35m0nd142/LFISuite", "_anchor": "lfisuite", "_section": "", "_group": "LFI", "_tabs": ["lfi"], "_tab_titles": ["LFI"], "_page": "/tools/lfisuite/"}, {"name": "LFIFreak", "url": "https://github.com/OsandaMalith/LFiFreak", "description": "Local File Inclusion automation tool for PHP.", "repo": "OsandaMalith/LFiFreak", "_anchor": "lfifreak", "_section": "", "_group": "LFI", "_tabs": ["lfi"], "_tab_titles": ["LFI"], "_page": "/tools/lfifreak/"}, {"name": "Liffy", "url": "https://github.com/mzfr/liffy", "description": "Local File Inclusion automation tool for PHP.", "repo": "mzfr/liffy", "_anchor": "liffy", "_section": "", "_group": "LFI", "_tabs": ["lfi"], "_tab_titles": ["LFI"], "_page": "/tools/liffy/"}]}]}], "tools": [{"name": "Bolt", "url": "https://github.com/s0md3v/Bolt", "description": "CSRF Scanner.", "category": "web-app", "section": "", "group": "CSRF", "repo": "s0md3v/Bolt", "links": [], "tags": [], "path": "/tools/bolt-web-app/", "listing": "/web-app/#bolt"}, {"name": "Commix", "url": "https://github.com/commixproject/commix", "description": "Automated All-in-One OS Command Injection Exploitation Tool.", "category": "web-app", "section": "", "group": "Frameworks", "repo": "commixproject/commix", "links": [], "tags": [], "path": "/tools/commix/", "listing": "/web-app/#commix"}, {"name": "Corsy", "url": "https://github.com/s0md3v/Corsy", "description": "CORS Misconfiguration Scanner.", "category": "web-app", "section": "", "group": "CORS", "repo": "s0md3v/Corsy", "links": [], "tags": [], "path": "/tools/corsy/", "listing": "/web-app/#corsy"}, {"name": "CRLFSuite", "url": "https://github.com/Nefcore/CRLFsuite", "description": "The most powerful CRLF injection (HTTP Response Splitting) scanner.", "category": "web-app", "section": "", "group": "CRLF", "repo": "Nefcore/CRLFsuite", "links": [], "tags": [], "path": "/tools/crlfsuite/", "listing": "/web-app/#crlfsuite"}, {"name": "dotdotpwn", "url": "https://github.com/wireghoul/dotdotpwn", "description": "The Directory Traversal Fuzzer.", "category": "web-app", "section": "", "group": "Directory Traversal", "repo": "wireghoul/dotdotpwn", "links": [], "tags": [], "path": "/tools/dotdotpwn/", "listing": "/web-app/#dotdotpwn"}, {"name": "http-request-smuggling", "url": "https://github.com/anshumanpattnaik/http-request-smuggling", "description": "HTTP Request Smuggling Detection Tool.", "category": "web-app", "section": "", "group": "Protocols", "repo": "anshumanpattnaik/http-request-smuggling", "links": [], "tags": [], "path": "/tools/http-request-smuggling/", "listing": "/web-app/#http-request-smuggling"}, {"name": "LFIFreak", "url": "https://github.com/OsandaMalith/LFiFreak", "description": "Local File Inclusion automation tool for PHP.", "category": "web-app", "section": "", "group": "LFI", "repo": "OsandaMalith/LFiFreak", "links": [], "tags": [], "path": "/tools/lfifreak/", "listing": "/web-app/#lfifreak"}, {"name": "LFISuite", "url": "https://github.com/D35m0nd142/LFISuite", "description": "Automated scan and exploitation of Local File Inclusion.", "category": "web-app", "section": "", "group": "LFI", "repo": "D35m0nd142/LFISuite", "links": [], "tags": [], "path": "/tools/lfisuite/", "listing": "/web-app/#lfisuite"}, {"name": "Liffy", "url": "https://github.com/mzfr/liffy", "description": "Local File Inclusion automation tool for PHP.", "category": "web-app", "section": "", "group": "LFI", "repo": "mzfr/liffy", "links": [], "tags": [], "path": "/tools/liffy/", "listing": "/web-app/#liffy"}, {"name": "Security Headers", "url": "https://securityheaders.com/", "description": "Tool designed to help you better deploy and understand modern security features that are available for your website.", "category": "web-app", "section": "", "group": "Headers", "repo": null, "links": [], "tags": [], "path": "/tools/security-headers/", "listing": "/web-app/#security-headers"}, {"name": "slipit", "url": "https://github.com/usdAG/slipit", "description": "Utility for creating ZipSlip archives.", "category": "web-app", "section": "", "group": "Directory Traversal", "repo": "usdAG/slipit", "links": [], "tags": [], "path": "/tools/slipit/", "listing": "/web-app/#slipit"}, {"name": "sql-map", "url": "https://github.com/sqlmapproject/sqlmap", "description": "Automatic SQL injection and database takeover tool.", "category": "web-app", "section": "", "group": "Databases", "repo": "sqlmapproject/sqlmap", "links": [], "tags": [], "path": "/tools/sql-map/", "listing": "/web-app/#sql-map"}, {"name": "TIDoS", "url": "https://github.com/0xInfection/TIDoS-Framework", "description": "HTTP Request Smuggling Detection Tool.", "category": "web-app", "section": "", "group": "Frameworks", "repo": "0xInfection/TIDoS-Framework", "links": [], "tags": [], "path": "/tools/tidos/", "listing": "/web-app/#tidos"}, {"name": "TLS-Scanner", "url": "https://github.com/tls-attacker/TLS-Scanner", "description": "Assists in the evaluation of TLS Server configurations.", "category": "web-app", "section": "", "group": "SSL/TLS", "repo": "tls-attacker/TLS-Scanner", "links": [], "tags": [], "path": "/tools/tls-scanner/", "listing": "/web-app/#tls-scanner"}, {"name": "tplmap", "url": "https://github.com/epinna/tplmap", "description": "Server-Side Template Injection and Code Injection Detection and Exploit Tool.", "category": "web-app", "section": "", "group": "Frameworks", "repo": "epinna/tplmap", "links": [], "tags": [], "path": "/tools/tplmap/", "listing": "/web-app/#tplmap"}, {"name": "XSS'OR", "url": "https://github.com/evilcos/xssor2", "description": "XSS'OR - Hack with JavaScript.", "category": "web-app", "section": "", "group": "Cross-Site Scripting", "repo": "evilcos/xssor2", "links": [], "tags": [], "path": "/tools/xss-or/", "listing": "/web-app/#xss-or"}, {"name": "XSStrike", "url": "https://github.com/s0md3v/XSStrike", "description": "Most advanced XSS scanner.", "category": "web-app", "section": "", "group": "Cross-Site Scripting", "repo": "s0md3v/XSStrike", "links": [], "tags": [], "path": "/tools/xsstrike/", "listing": "/web-app/#xsstrike"}]}