Web Security

Security Operations

Monkey-Spider on SecurityListing: A crawler-based low-interaction client honeypot for exposing website threats.

Dynamic Application Security Testing

N-Stalker on SecurityListing: A web security tool that scans for vulnerabilities and known attacks.

Penetration Testing

bWAPP on SecurityListing: A free and open-source deliberately insecure web application for security enthusiasts, developers, and students to discover and prevent web vulnerabilities.

Dynamic Application Security Testing

Caido on SecurityListing: A lightweight web security auditing toolkit that simplifies security tasks and enhances productivity.

Penetration Testing

PentesterLab PRO on SecurityListing: Online platform offering 700+ hands-on web security exercises and training

ISS Systems

Data Protection

ISS Systems appears to be a company associated with information security given the domain and the redirected WEAREISS page, but the landing content shown is a generic safety check screen with a Contin

Security Scanning

Acunetix Web Vulnerability Scanner on SecurityListing: A tool that automatically audits website security by crawling an entire website and identifying vulnerabilities

Vulnerability Assessment

Burp Suite Professional on SecurityListing: A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing.

Security Scanning

Acunetix Web Vulnerability Scanner Demo Site on SecurityListing: A demonstration site for the Acunetix Web Vulnerability Scanner, featuring intentionally vulnerable PHP code to test web application security.

Vulnerability Assessment

Paros on SecurityListing: A Java based HTTP/HTTPS proxy for assessing web application vulnerability with various useful features.

Security Scanning

Perisai Web Scanner on SecurityListing: Automated web scanner detecting vulnerabilities and HTTP security headers

API Security

Impart on SecurityListing: A web application firewall and API security platform that combines API discovery, runtime protection, vulnerability testing, and security posture management.

Penetration Testing

PortSwigger on SecurityListing: A comprehensive toolkit for web application security testing, offering a range of products and solutions for identifying vulnerabilities and improving security posture.

Security Scanning

Qualys Web Application Scanning (WAS) on SecurityListing: A cloud-based DAST solution that discovers, inventories, and tests web applications and APIs for security vulnerabilities across diverse environments.

API Security

SafeLine WAF on SecurityListing: SafeLine WAF is an open-source web application firewall that protects web services by filtering malicious HTTP traffic through intelligent semantic analysis and machine learning-based detection.

Penetration Testing

Grendel-Scan on SecurityListing: A tool for automated security scanning of web applications and manual penetration testing.

Penetration Testing

XSSer on SecurityListing: Automatic tool for pentesting XSS attacks against different applications

Penetration Testing

PentesterLab Master Advanced Web Hacking on SecurityListing: Online platform for web app security training via hands-on labs and code review

Penetration Testing

Green Bone Web App Scanning on SecurityListing: Managed web application security scanning service by Greenbone AG

Intrusion Detection and Prevention Systems

BotScout.com on SecurityListing: BotScout.com provides proactive bot detection, screening, and banning through a powerful API.

Dynamic Application Security Testing

Wapiti on SecurityListing: Web-application vulnerability scanner with extensive coverage of security testing modules.

API Security

TrustCaptcha on SecurityListing: A privacy-focused CAPTCHA alternative that protects websites from bot attacks using proof-of-work challenges and AI-based detection while maintaining GDPR compliance.

Guides

Web Application Exploits and Defenses on SecurityListing: An educational codelab that demonstrates web application vulnerabilities including XSS, XSRF, and code execution attacks along with their corresponding defensive measures.

Penetration Testing

OWASP Bricks on SecurityListing: Deliberately vulnerable web application for security professionals to practice attack techniques.

Security Scanning

Internacious Website and Email Security Scan on SecurityListing: Web and email security scanner that checks 16 critical security points in 60 seconds

Penetration Testing

SecGame #1: Sauron on SecurityListing: A Linux-based environment for penetration testing and vulnerability exploitation

Blogs and News

The Absurdly Underestimated Dangers of CSV Injection on SecurityListing: A blog post discussing the often overlooked dangers of CSV injection in applications.

Network Sandboxing

URL Scan on SecurityListing: A website scanner that provides a sandbox for the web, allowing users to scan URLs and websites for potential threats and vulnerabilities.

Vulnerability Assessment

Webhacking.kr on SecurityListing: Korean cyber-security challenge platform for exploiting and defending web application vulnerabilities.

Vulnerability Assessment

AWVS on SecurityListing: A hosted web application security testing tool that enables security researchers to register, activate their accounts, and scan web applications for vulnerabilities.