A list of cheat sheets for application security
☆533Jul 3, 2023Updated 3 years ago
Alternatives and similar repositories for cheat-sheets
Users that are interested in cheat-sheets are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A knowledge base of best practices for application security☆36Aug 10, 2023Updated 3 years ago
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆45Jun 3, 2024Updated 2 years ago
- Service-Now Article Bruteforcer☆16Jun 5, 2020Updated 6 years ago
- Load your data into burp☆11Apr 26, 2023Updated 3 years ago
- Automation for javascript recon in bug bounty.☆1,110Sep 9, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Awesome Vulnerable Applications☆1,508Oct 14, 2026Updated 3 weeks ago
- A training course on Web Security, Exploit Development and Source Code Auditing from 2009.☆11Oct 7, 2026Updated 3 weeks ago
- Xss payload for bypassing waf☆20Apr 18, 2020Updated 6 years ago
- A Firefox Web Extension to improve the discovery of DOM XSS.☆293Nov 13, 2024Updated last year
- part of my wordlist to bruteforce DNS to find subdoamains.☆61Jul 26, 2021Updated 5 years ago
- Google 、Baidu、Bing、Github Hack tools☆17Nov 3, 2021Updated 5 years ago
- A set of tools, procedures, and playbooks for performing bug bounties☆19Dec 2, 2018Updated 7 years ago
- Reverse proxies cheatsheet☆1,890Nov 4, 2023Updated 3 years ago
- A framework for the detection of COSI vulnerabilities / XS-Leaks☆14Mar 29, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Chameleon Wordlists☆15Sep 13, 2022Updated 4 years ago
- Some simple scripts that I use during bug bounty hunting in Android Apps☆29Jan 30, 2025Updated last year
- An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentes…☆229Aug 26, 2021Updated 5 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- Client Side Prototype Pollution Scanner☆530Sep 17, 2022Updated 4 years ago
- A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.☆1,426Jun 22, 2026Updated 4 months ago
- Penetration tests guide based on OWASP including test cases, resources and examples.☆2,853Mar 23, 2022Updated 4 years ago
- ☆1,203Sep 2, 2022Updated 4 years ago
- Useful "Match and Replace" burpsuite rules☆373Sep 26, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- All the code snippets from my Secure Code Review series on youtube (youtube.com/@muqsitbaig)!☆25Jul 28, 2024Updated 2 years ago
- A cheatsheet for exploiting server-side SVG processors.☆804Jul 2, 2020Updated 6 years ago
- A bash tool used to install famous bug bounty tools. Mainly used when setting up a fresh environment.☆17Mar 20, 2023Updated 3 years ago
- Tools and methods that I personally use for Recon and Exploitations☆56May 1, 2025Updated last year
- Generic plugin based web application security fuzzing for anomalies by Slándáil Research Limited☆13Feb 13, 2024Updated 2 years ago
- Random utilities from my security projects that might be useful to others☆183Jan 26, 2025Updated last year
- Script for Bug Bounty☆29Sep 17, 2021Updated 5 years ago
- 黑魔鬼插件☆19Jan 30, 2021Updated 5 years ago
- An interactive security testing platform that demonstrates real vulnerabilities in Large Language Models.☆11Aug 30, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Compiled dataset of Java deserialization CVEs☆60Aug 31, 2020Updated 6 years ago
- ☆11Jan 24, 2023Updated 3 years ago
- The Repository contains various payloads, tools, tips and tricks from various hackers around the world. Please take a quick look down her…☆15May 15, 2025Updated last year
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 4 years ago
- Cheat sheet☆37Dec 16, 2019Updated 6 years ago
- Useful note☆17Oct 5, 2025Updated last year
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,368Aug 7, 2026Updated 2 months ago