web-pentest git:20260918.865d0acA

Immutable. This exact content never changes and is served at /api/v1/blob/f69aa5e9cc86cb25.

---
name: web-pentest
description: Web application penetration testing: SQL injection, XSS, CSRF, SSRF, auth bypass, file upload, command injection. Trigger: pentest, exploit web, sqli, xss, csrf, ssrf, auth bypass, upload exploit, rce, command inject.
---

# Web Pentest

Executable Python tools for web application security testing.

## Scripts

- `scripts/sqli_scanner.py` -- SQL injection detection (error/union/blind/time-based)
- `scripts/xss_fuzzer.py` -- XSS fuzzing with WAF bypass payloads
- `scripts/auth_bypass.py` -- Auth bypass: SQLi auth, JWT manipulation, session fixation