This repository contains list of web security related resources that you can use to gain new skills and extend knowledge
☆71Jul 25, 2026Updated 3 months ago
Alternatives and similar repositories for web-security-learning-resources
Users that are interested in web-security-learning-resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A baseline configuration and guidelines for securing source code repositories, covering branch protection, access controls, secret scanni…☆10May 8, 2026Updated 5 months ago
- Burp-Addons : Some of Burp Addons I use ( Mindak ak fahem )☆12Sep 1, 2022Updated 4 years ago
- ☆20Mar 13, 2022Updated 4 years ago
- ☆17Jul 8, 2024Updated 2 years ago
- Automate All Pivoting System Enumeration with this Bash Script☆13Nov 7, 2022Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- An ongoing & curated collection of awesome software practices and remediation, libraries and frameworks,payloads and techniques, best gui…☆45Sep 23, 2023Updated 3 years ago
- Notes I took while preparing for eJPT certification by INE Security (passed 19/20, fka eLearn Security)☆166Nov 1, 2025Updated last year
- ☆46Nov 5, 2025Updated 11 months ago
- ☆11Oct 15, 2024Updated 2 years ago
- An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites…☆26Jun 14, 2023Updated 3 years ago
- ☆20May 3, 2024Updated 2 years ago
- Useful tips and resources for preparing for the AWAE exam.☆216Jul 30, 2021Updated 5 years ago
- Collection of quirky behaviours of code and the CTF challenges that I made around them.☆27Jan 27, 2021Updated 5 years ago
- ☆19Sep 2, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆55Mar 13, 2025Updated last year
- A Burp Suite jython extension that saves a URL List from the Burp Proxy History or Burp Target Site Map as a text file.☆10Jun 11, 2013Updated 13 years ago
- Web path scanner☆11Apr 1, 2021Updated 5 years ago
- ☆34Aug 25, 2021Updated 5 years ago
- Harness Engineering for AI Coding Agents - Full Course Code, Specifications, aisuite Integration, and Dashboard☆12Oct 17, 2026Updated 2 weeks ago
- eLearnSecurity Certified Exploit Development☆107Jul 25, 2021Updated 5 years ago
- ☆45Oct 19, 2021Updated 5 years ago
- ☆389Jun 30, 2021Updated 5 years ago
- Training for Golang (go language)☆10Mar 29, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一个用于检测HOST 头攻击漏洞的Burp Suite扩展插件。☆13Mar 7, 2025Updated last year
- Secrets detection based on regular expressions.☆22Sep 8, 2026Updated last month
- Universal MCP Context Worm Security Testing Framework☆15Aug 18, 2026Updated 2 months ago
- This tool helps #blueteams detect bad actors who may be port scanning the network, and allows #redteams to practice honeypot evasion.☆11Oct 20, 2020Updated 6 years ago
- Slides from my talk at the Adversary Village, Defcon 30☆29Nov 11, 2022Updated 3 years ago
- your bestfried for finding URLs of a target☆10Apr 5, 2023Updated 3 years ago
- ☆11Apr 25, 2021Updated 5 years ago
- ☆13Jun 11, 2014Updated 12 years ago
- A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to re…☆10Oct 21, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Community-maintained database of MCP server audit results and security assessments. Contains structured audit findings, compliance report…☆11Jul 14, 2026Updated 3 months ago
- ☆13Apr 29, 2023Updated 3 years ago
- A Python program to scrape secrets from GitHub through usage of a large repository of dorks.☆14Jan 28, 2021Updated 5 years ago
- Projeto voltado ao desenvolvimento de uma aplicação web intencionalmente vulnerável.☆11Feb 25, 2023Updated 3 years ago
- A cheatsheet for exploiting server-side SVG rasterization.☆31Jul 5, 2022Updated 4 years ago
- Takes a list of domains as the input, checks if they have a security.txt, outputs the results.☆16May 15, 2020Updated 6 years ago
- This repository presents a proof-of-concept of CVE-2023-22527☆14Jan 23, 2024Updated 2 years ago