Repolode
hahwul

hahwul/WebHackersWeapons

A curated awesome-list of tools, bookmarklets, browser addons and Burp/Caido/ZAP extensions used by web hackers and bug bounty hunters.

스타
5,092
포크
853
열린 이슈
6
마지막 커밋
지난달

어떤 프로젝트인가요?

WebHackersWeapons is a curated list of tools that web security researchers and bug bounty hunters use. Entries are grouped into categories such as tools, bookmarklets, browser addons, and Burp Suite, Caido and ZAP addons, and each tool is tagged by type (for example Recon, Proxy, Fuzzer, Scanner) and by technique (subdomains, portscan, xss, sqli, jwt, and so on).

The Tools section is the largest part of the list. It covers subdomain enumeration and DNS tools, URL and endpoint discovery from archives and crawlers, port scanners, intercepting proxies such as mitmproxy and Caido, and all-in-one frameworks like ZAP and Metasploit. Each row lists the project's language and the operating systems it supports, which helps when comparing options.

The repository is a directory rather than a software package, so there is nothing to install. It is useful as a starting point when you need a tool for a particular recon or testing step and want to see what the community commonly uses.

핵심 기능

  • 01Lists tools grouped by type such as Recon, Proxy, Fuzzer and Scanner.
  • 02Covers subdomain enumeration, DNS lookup, port scanning and URL discovery.
  • 03Includes intercepting proxies like mitmproxy, Caido and hetty.
  • 04Shows language and OS support for each listed tool.
  • 05Provides browser addons, bookmarklets and Burp/Caido/ZAP extensions.

활용 사례

  • Finding a subdomain enumeration or URL discovery tool for a bug bounty recon workflow.
  • Choosing an intercepting proxy for web application testing.
  • Browsing which tools the web security community commonly uses before writing your own scripts.

토픽

자주 묻는 질문

WebHackersWeapons은(는) 무엇인가요?
A curated awesome-list of tools, bookmarklets, browser addons and Burp/Caido/ZAP extensions used by web hackers and bug bounty hunters. WebHackersWeapons is a curated list of tools that web security researchers and bug bounty hunters use. Entries are grouped into categories such as tools, bookmarklets, browser addons, and Burp Suite, Caido and ZAP addons, and each tool is tagged by type (for example Recon, Proxy, Fuzzer, Scanner) and by technique (subdomains, portscan, xss, sqli, jwt, and so on).
WebHackersWeapons은(는) 무료로 사용할 수 있나요? 라이선스는 무엇인가요?
WebHackersWeapons은(는) MIT 라이선스의 오픈소스입니다. 상업용 제품에 사용하기 전에 라이선스 조건을 확인하세요.
WebHackersWeapons은(는) 아직 유지보수되고 있나요?
6개월 이내 업데이트. WebHackersWeapons의 마지막 커밋은 2026년 9월 7일입니다.
WebHackersWeapons은(는) 어디에 사용할 수 있나요?
Finding a subdomain enumeration or URL discovery tool for a bug bounty recon workflow. Choosing an intercepting proxy for web application testing. Browsing which tools the web security community commonly uses before writing your own scripts.
WebHackersWeapons은(는) 어디서 받을 수 있나요?
소스 코드와 설치 방법은 GitHub에 있습니다: https://github.com/hahwul/WebHackersWeapons

요약은 프로젝트 README를 바탕으로 AI가 작성했습니다. GitHub 통계는 매일 갱신됩니다.

관련 프로젝트