Penultimate / challenges
Security challenges and CTFs created by the Penultimate team.
☆13Updated 7 years ago
Alternatives and similar repositories for challenges:
Users that are interested in challenges are comparing it to the libraries listed below
- ☆70Updated 7 years ago
- Highlight Burp proxy requests made by different browsers☆30Updated 7 years ago
- Scripts and auxiliary files for fuzzing PHP's unserialize function☆43Updated 7 years ago
- A deliberately vulnerable modern day app with lots of DOM related bugs☆36Updated 5 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Updated 8 years ago
- A repository with various tutorials on how to do things in Pentesting, setup environments and other things☆20Updated 7 years ago
- Burp Suite extension to generate Intruder payloads using Radamsa☆89Updated 7 years ago
- Modified version of ActiveScan++ Burp Suite extension☆31Updated 8 years ago
- ☆34Updated 5 years ago
- ☆7Updated 7 years ago
- Simple socket-based gateway to the Burp Collaborator☆33Updated 8 years ago
- CTF Write-ups☆26Updated 5 years ago
- A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.☆43Updated 4 years ago
- public exploits☆35Updated last year
- Various tools for managing bug bounty recon and exploration.☆47Updated 2 years ago
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆25Updated 7 years ago
- XSS in pastebin.com and reddit.com via unsanitized markdown output☆87Updated 6 years ago
- DoS PoC's for SAP products☆50Updated 7 years ago
- Exploitation challenges for CTF☆62Updated 7 years ago
- intentionally vulnerable API☆29Updated 5 months ago
- ☆36Updated last month
- XXE vulnerability demo☆22Updated 10 years ago
- ☆20Updated 7 years ago
- cve-2014-0130 rails directory traversal vuln☆19Updated 7 years ago
- Parse X509 certificates to get the (sub)domains in it.☆28Updated 6 years ago
- Extension adds a new tab in Burp Suite called Extractor☆43Updated 5 years ago
- Stay on top of new domains! Bug bounty hunters can use this tool to receive Pushbullet notifications each time there is a new target subd…☆26Updated 6 years ago
- Materials related to the 2017 BSides Las Vegas presentation☆51Updated 4 years ago
- ☆84Updated 8 years ago
- SA-CORE-2018-004 POC #drupalgeddon3☆42Updated 6 years ago