Secure-D / wastcLinks
Secure-D Web Application Security Test Checklist summarizes well-known weaknesses, vulnerabilities and best practices into review topics with short description and recommendation. Its objective is to aid penetration tester to review the web application thoroughly.
☆21Updated 4 years ago
Alternatives and similar repositories for wastc
Users that are interested in wastc are comparing it to the libraries listed below
Sorting:
- The domain enumeration and scanning tool for hackers☆18Updated 9 months ago
- A formula to calculate bounty amounts.☆14Updated 7 years ago
- A list of universities with vulnerability disclosure policies☆50Updated 4 years ago
- Several Python scripts used to fuzz and exploit SLmail. These are meant to supplement the Kali Linux Hands-on Pentesting Udemy course.☆16Updated 6 years ago
- Set of security tools that can be integrated in Jenkins pipelines.☆18Updated 5 years ago
- ☆17Updated 2 years ago
- Cheatsheets on security vulnerabilities and exploits.☆33Updated 5 years ago
- Skills To Improve Before Heading to OSCP☆15Updated 8 years ago
- Notes and helper scripts/files/etc from when I passed my OSCP☆19Updated 5 years ago
- A JavaScript components vulnerability scanner, based on RetireJS☆37Updated 5 years ago
- A static website template for security pages.☆52Updated 10 months ago
- Checklist and tools for increasing security of Apache Airflow☆32Updated 4 years ago
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆20Updated 4 years ago
- recon-ng modules for Censys☆37Updated last year
- A ping detection tool for linux☆24Updated 5 years ago
- Burp Suite Pro extension☆10Updated 8 years ago
- Personal blog about security, exploitation, CTFs, ...☆21Updated 6 years ago
- A number of scripts POC's and problems solved as pentests move along.☆45Updated last year
- Create wordlists from source codes files/directories for enumeration☆30Updated last year
- VyAPI - A cloud based vulnerable hybrid Android App☆85Updated 5 years ago
- pentest scripts☆21Updated 4 years ago
- This is a collection of ZAProxy Automation Tools and scripts to automate security tests of WEB Applications and WEB Sites☆28Updated 2 years ago
- ☆10Updated 3 years ago
- This repo contains workshop material delivered at #nullcon2020☆15Updated 5 years ago
- AWS Security Checks☆39Updated 7 years ago
- Penetration testing course by Z0F.☆53Updated 3 years ago
- ☆23Updated 11 years ago
- Writeups for all the HTB machines I have done☆63Updated 2 years ago
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10Updated 4 years ago
- retrive metadata endpoint data with these one liners.☆38Updated 4 years ago