This repository is for authorized security testing and education only.
Okay to use on:
- Systems you own
- Systems you have explicit written permission to test
- In-scope bug bounty programs
- Controlled labs/CTFs (DVWA, WebGoat, etc.)
Never okay:
- Testing anything without authorization
- Accessing data or systems you're not permitted to touch
- Causing damage or disruption
You are solely responsible for how you use this content and for complying with the law in your jurisdiction. It's provided "as is," with no warranty — the maintainers and contributors don't endorse misuse and aren't liable for it. Follow responsible disclosure if you find something real.
When in doubt, don't test. Get permission first.