AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.
☆106Oct 29, 2025Updated 11 months ago
Alternatives and similar repositories for AspGoat
Users that are interested in AspGoat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 11 months ago
- Local Windows credential extraction☆24Jul 14, 2026Updated 2 months ago
- ☆19Sep 2, 2021Updated 5 years ago
- A small go harness that uses Ollama to orchestrate LLMs in a restricted process flow☆19Sep 10, 2024Updated 2 years ago
- 子域名接管的几种变体靶场☆22Jun 22, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Defending OT with ATT&CK provides a customized threat collection tailored to the attack surface and threat model of operational technolog…☆17May 28, 2025Updated last year
- Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security.☆30Aug 20, 2024Updated 2 years ago
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆22Apr 16, 2026Updated 5 months ago
- Token impersonation. Administrator to SYSTEM. No tools required.☆17Mar 26, 2026Updated 6 months ago
- A Collection of Wordlists for Penetration Testing☆44Mar 13, 2026Updated 7 months ago
- GitHub - therealilyas/pentest-toolkit: PentestKit — Advanced penetration testing toolkit in Python & Bash for bug bounty and ethical hack…☆41Updated this week
- Active Directory forensic framework☆16May 18, 2026Updated 4 months ago
- Free BugBounty KrazePlanetTraining☆59Dec 17, 2025Updated 9 months ago
- Discover how I configured Microsoft Server 2022 on a Virtual Machine for Active Directory, set up a Domain Controller, and created over 1…☆12Apr 8, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆38Sep 28, 2025Updated last year
- Extract DPAPI CREDHIST and Masterkey hashes☆22May 28, 2026Updated 4 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆39Jul 4, 2026Updated 3 months ago
- ☆55Oct 11, 2025Updated last year
- A developer-friendly framework for exhaustive analysis of (PCAP and PE) files.☆14Nov 6, 2017Updated 8 years ago
- Resources, research, and tools for securing AI systems☆31Aug 11, 2025Updated last year
- Modular OSINT and attack surface analysis platform for authorized security research, with risk scoring, attack paths, and report generati…☆87Jun 4, 2026Updated 4 months ago
- NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js☆92Apr 12, 2025Updated last year
- Collection of self-made Red Team tools that have come in handy☆12Aug 25, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Impersonate Windows tokens in Nim☆24Aug 4, 2025Updated last year
- PAYGoat is a banking application built for educational purposes, focused on exploring and understanding common business logic flaws in fi…☆198Mar 11, 2026Updated 7 months ago
- little scripts of bash stuff that i've found handy.☆16Feb 2, 2019Updated 7 years ago
- Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application p…☆13Jun 4, 2022Updated 4 years ago
- A deliberately vulnerable java app for educational purposes☆19Mar 4, 2024Updated 2 years ago
- ☆24Jun 17, 2024Updated 2 years ago
- ☆20Aug 4, 2026Updated 2 months ago
- PowerShell implementation for AD CS☆162Jul 30, 2026Updated 2 months ago
- ✨ Open-source AI hackers for your apps 👨🏻💻☆34Sep 9, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Reverse engineering CTFs.☆69Jan 25, 2026Updated 8 months ago
- IOC/Hash scanner and IDS layer 4 designed to be portable and fast☆28Jan 28, 2026Updated 8 months ago
- Biscuit's Bug Bounty Playbook is a curated hub for cybersecurity learners and bug bounty hunters. It includes tools, methodologies, write…☆22Sep 25, 2026Updated 2 weeks ago
- Citrix Phishlet☆24Feb 2, 2021Updated 5 years ago
- Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges☆43Oct 27, 2024Updated last year
- Proof of Concept for CVE-2023-23397 in Python☆25Mar 21, 2023Updated 3 years ago
- A cheatsheet for NetExec☆214Jun 9, 2025Updated last year