This repository is a comprehensive knowledge base for web security, covering vulnerability exploitation, penetration testing, and code audit techniques. It is organized into three main directories: 'exp/' for exploit techniques, 'vul/' for vulnerability principles, and 'penetration/' for penetration testing procedures. The content is detailed, well-structured, and includes practical payloads, detection methods, and defense strategies. It also features an AI/Wiki index for efficient retrieval. While not a software application, it serves as an invaluable reference for security professionals, CTF players, and red teamers. The only executable component is a Python script for log tampering.