A knowledge base of best practices for application security
☆36Aug 10, 2023Updated 3 years ago
Alternatives and similar repositories for application-security-handbook
Users that are interested in application-security-handbook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evilginx2-Phishlets☆26Nov 21, 2025Updated 10 months ago
- tools, files, and scripts I use for PNPT and CRTO☆24Feb 21, 2022Updated 4 years ago
- ☆10Apr 6, 2024Updated 2 years ago
- Collection of Helm charts that developed by the BeeInventor.☆10May 26, 2026Updated 4 months ago
- ☆18Sep 2, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆40Aug 8, 2021Updated 5 years ago
- Vulnerable webapp testbed☆26May 11, 2016Updated 10 years ago
- Files used for various testing methodologies.☆12Apr 15, 2026Updated 6 months ago
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 4 years ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆108Feb 25, 2025Updated last year
- Exploit for CVE-2024-20767 - Adobe ColdFusion☆34Dec 19, 2024Updated last year
- Burp extension to generate multi-step CSRF POC.☆31Sep 23, 2019Updated 7 years ago
- Cryptanalysis of the DAO exploit & Multi-Stage Attack☆19Apr 3, 2024Updated 2 years ago
- A Kubernetes service reverse proxy that requires no configuration☆13Oct 4, 2015Updated 11 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- PEN-300 collection to help you on your exam.☆14Apr 19, 2022Updated 4 years ago
- DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)☆65Nov 13, 2022Updated 3 years ago
- ASSVD☆17Dec 19, 2025Updated 9 months ago
- Tool to download IP ranges of CDN providers for bug bounties☆14Updated this week
- Vulnerable code snippets repository showcasing different vulnerabilities to practice code analysis skills.☆22Sep 4, 2023Updated 3 years ago
- Popcorn - the JSON fuzzer☆22Jul 27, 2014Updated 12 years ago
- This repository holds a target infrastructure you can use for running the nimbostratus tools.☆24Mar 9, 2015Updated 11 years ago
- Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of…☆106May 27, 2020Updated 6 years ago
- In-depth internals, my personal notes, example codes and projects. Includes - Thousands of codes, OOP, Concurrency, Parallelism, Gorouti…☆11Nov 25, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Chameleon Wordlists☆15Sep 13, 2022Updated 4 years ago
- Prototype-Pollution-Lab to chain the vulnerabilities between multiple accounts.☆13Sep 11, 2021Updated 5 years ago
- Find related domains of a given domain.☆106Jun 5, 2026Updated 4 months ago
- A Simple command line tool that helps checking web applications to identify insecure deserialization vulnerabilities.☆24Jul 10, 2019Updated 7 years ago
- Curated list of Meta (formerly Facebook) owned IT assets☆61Jul 20, 2025Updated last year
- ☆74Jun 16, 2022Updated 4 years ago
- Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, f…☆14Sep 20, 2021Updated 5 years ago
- Yet another Werkzeug Console Pin Exploit Explanation☆23Jul 30, 2021Updated 5 years ago
- For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)☆54Feb 26, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Stack Based buffer overflow attack☆21Nov 25, 2023Updated 2 years ago
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- macOS/OSX hash dump script taken from Empire framework☆13Oct 19, 2018Updated 7 years ago
- OGHarn: Oracle-guided Fuzzing Harness Generation☆56Oct 9, 2026Updated last week
- JavaScript Libraries to use for building Open Data Tables☆16Dec 1, 2010Updated 15 years ago
- Talk slides and material☆38Mar 24, 2024Updated 2 years ago
- The MPT (Mobile Pentest Toolkit) is a must-have solution for your android penetration testing workflow.☆97May 15, 2026Updated 5 months ago