---
name: web-pentest
description: Web application penetration testing: SQL injection, XSS, CSRF, SSRF, auth bypass, file upload, command injection. Trigger: pentest, exploit web, sqli, xss, csrf, ssrf, auth bypass, upload exploit, rce, command inject.
---

# Web Pentest

Executable Python tools for web application security testing.

## Scripts

- `scripts/sqli_scanner.py` -- SQL injection detection (error/union/blind/time-based)
- `scripts/xss_fuzzer.py` -- XSS fuzzing with WAF bypass payloads
- `scripts/auth_bypass.py` -- Auth bypass: SQLi auth, JWT manipulation, session fixation