Minimalist cheat sheet for developpers to write secure code
☆54Jul 17, 2020Updated 6 years ago
Alternatives and similar repositories for security-cheat-sheet
Users that are interested in security-cheat-sheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp and ZAP plugin that display image metadata (JPEG Exif or PNG text chunk).☆16Apr 15, 2023Updated 3 years ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- Material from presentations done by GoSecure researchers☆34Oct 10, 2023Updated 3 years ago
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- ☆20Jan 12, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Workshop given at Hack in Paris 2019☆126Jun 8, 2023Updated 3 years ago
- Identify vulnerable libraries in Maven dependencies☆45Dec 14, 2022Updated 3 years ago
- Vulnerable Node.js Web Application to pratice with your pentesting skills☆21Apr 29, 2017Updated 9 years ago
- ☆18Oct 30, 2022Updated 3 years ago
- FxCop rules that aim to help security audit on .NET applications.☆14Nov 10, 2017Updated 8 years ago
- Carve Windows Prefetch files from arbitrary binary data☆16Jun 11, 2017Updated 9 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- Portable utility to check if a machine has been infected by Shamoon2☆15Jan 13, 2017Updated 9 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Mar 27, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- splunk_pentest_app☆49Apr 22, 2016Updated 10 years ago
- Collection of my slide decks, conference videos and research white papers☆27Sep 23, 2025Updated last year
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- V1.0☆14Aug 8, 2016Updated 10 years ago
- DO NOT RUN THIS.☆10Jul 31, 2026Updated 2 months ago
- Rapid Assessment of Web Resources☆19Nov 11, 2016Updated 9 years ago
- VM escape (QEMU, VirtualBox, VMware)☆17Mar 21, 2022Updated 4 years ago
- ☆13Mar 31, 2021Updated 5 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆47Mar 22, 2017Updated 9 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Collection of Some Good research Documentation☆27Dec 10, 2017Updated 8 years ago
- Discord bot to display events and information about a CTFd instance (https://ctfd.io/)☆12Jul 9, 2024Updated 2 years ago
- PrOfESSOS is our open source implementation for fully automated Evaluation-as-a-Service for SSO. PrOfESSOS introduces a generic approach …☆30Jan 8, 2023Updated 3 years ago
- A collection of scripts that I've written while pentesting.☆31Aug 3, 2018Updated 8 years ago
- A collection of XSS Attack vectors☆10Jul 31, 2026Updated 2 months ago
- The aim of the project is to develop intentionally vulnerable source code in various languages.☆16Mar 3, 2026Updated 7 months ago
- ☆11Jul 28, 2020Updated 6 years ago
- ☆29Nov 10, 2016Updated 9 years ago
- Contains all my research and content produced regarding the log4shell vulnerability☆31Jan 22, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials☆10Jun 30, 2021Updated 5 years ago
- Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website☆142Apr 29, 2020Updated 6 years ago
- ☆11Jan 24, 2023Updated 3 years ago
- Web interface and APIs for Assemblyline 4☆22Updated this week
- P2P Encrypted File Sharing In Your Browser via WebRTC☆37Dec 31, 2017Updated 8 years ago
- Index all certificates from certificate transparancy into Elasticsearch☆22Nov 22, 2017Updated 8 years ago
- Easily create index of your SANS books☆19Oct 28, 2022Updated 3 years ago