Open source. Open possibilities.

A curated collection of Web Application Security payloads and bypasses for pentesting and CTFs, covering vulnerability descriptions, exploitation techniques, and Burp Intruder file sets.

Ladder is a self-hosted HTTP web proxy for testing and analyzing how websites deliver content under different client conditions. It can alter request and response headers, inject or remove page code, apply domain rules, expose an API, and optionally integrate FlareSolverr.