AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.
☆108Oct 29, 2025Updated last year
Alternatives and similar repositories for AspGoat
Users that are interested in AspGoat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Red Lycoris — open-source DevSecOps-платформа для SAST, SCA, Secrets, IaC, политик безопасности и аудита. Создана для небольших команд дл…☆22Sep 4, 2026Updated last month
- Extract subdomains from CSP headers☆12Jul 10, 2025Updated last year
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- A PowerShell toolkit for Windows diagnostics, troubleshooting, maintenance, and guided repair actions.☆58Aug 20, 2026Updated 2 months ago
- 《ASPX安全-只有ASPX安全才能拯救.NET》Only ASPX Security Can Save The NET.☆38Oct 20, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- GUI and API for automating Frida-related tasks for mobile application analysis and security testing.☆14Jun 8, 2025Updated last year
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated last year
- A PowerShell interpreter vibe coded in Rust, with AI☆14Jan 5, 2026Updated 9 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆48Oct 25, 2026Updated last week
- HTTP proxy that uses trufflehog's engine to find secrets☆14Sep 4, 2025Updated last year
- Autonomous AI agents for bug bounty hunting, 18 parallel hunters, built-in validator, zero setup.☆22Apr 16, 2026Updated 6 months ago
- 子域名接管的几种变体靶场☆23Jun 22, 2024Updated 2 years ago
- ☆19Sep 2, 2021Updated 5 years ago
- Load your data into burp☆11Apr 26, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A modern web application firewall (WAF) management system built on top of HAProxy and OWASP Coraza WAF with the Coraza SPOA integration. …☆12Jun 2, 2025Updated last year
- The Kerberoasting / AD password-audit wordlist I use on engagements: priority-merged HashMob large list + The-Viper-One's kerberoast_pws,…☆16Oct 2, 2026Updated last month
- byebyeAV is a tool created by @amroes which bypassed the latest version at the time of windows defender, Sophos and Kaspersky☆14Sep 5, 2025Updated last year
- Defending OT with ATT&CK provides a customized threat collection tailored to the attack surface and threat model of operational technolog…☆17May 28, 2025Updated last year
- A small go harness that uses Ollama to orchestrate LLMs in a restricted process flow☆20Sep 10, 2024Updated 2 years ago
- Crypter developed in Rust, featuring the implementation of various injection and evasion techniques, and including a builder with an intu…☆22Jul 18, 2026Updated 3 months ago
- ☆55Oct 11, 2025Updated last year
- Local Windows credential extraction☆26Jul 14, 2026Updated 3 months ago
- A Collection of Wordlists for Penetration Testing☆44Mar 13, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- resux' reference sheets☆32Oct 26, 2026Updated last week
- NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js☆92Apr 12, 2025Updated last year
- 透過線上購物網站來實際操作來體驗 OWASP Top 10 各項資安問題☆11Nov 23, 2021Updated 4 years ago
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆38Sep 28, 2025Updated last year
- Free BugBounty KrazePlanetTraining☆61Dec 17, 2025Updated 10 months ago
- Resources, research, and tools for securing AI systems☆31Aug 11, 2025Updated last year
- Cette formation complète Ubuntu en français vous accompagne de débutant à expert à travers 7 niveaux progressifs. Idéale pour les débutan…☆15Apr 30, 2025Updated last year
- Impersonate Windows tokens in Nim☆24Aug 4, 2025Updated last year
- Damn Vulnerable Thick Client App developed in C# .NET☆184Aug 17, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security.☆30Aug 20, 2024Updated 2 years ago
- PAYGoat is a banking application built for educational purposes, focused on exploring and understanding common business logic flaws in fi…☆201Mar 11, 2026Updated 7 months ago
- Citrix Phishlet☆24Feb 2, 2021Updated 5 years ago
- ☆11Sep 11, 2025Updated last year
- A deliberately vulnerable java app for educational purposes☆19Mar 4, 2024Updated 2 years ago
- XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…☆63Feb 22, 2021Updated 5 years ago
- Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application p…☆13Jun 4, 2022Updated 4 years ago