AspGoat is an intentionally vulnerable ASP.NET Core application for learning and practicing web application security.
☆106Oct 29, 2025Updated 10 months ago
Alternatives and similar repositories for AspGoat
Users that are interested in AspGoat are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 10 months ago
- Local Windows credential extraction☆24Jul 14, 2026Updated last month
- Load your data into burp☆11Apr 26, 2023Updated 3 years ago
- ☆19Sep 2, 2021Updated 5 years ago
- A small go harness that uses Ollama to orchestrate LLMs in a restricted process flow☆19Sep 10, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 子域名接管的几种变体靶场☆22Jun 22, 2024Updated 2 years ago
- Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security.☆28Aug 20, 2024Updated 2 years ago
- Defending OT with ATT&CK provides a customized threat collection tailored to the attack surface and threat model of operational technolog…☆16May 28, 2025Updated last year
- GitHub - therealilyas/pentest-toolkit: PentestKit — Advanced penetration testing toolkit in Python & Bash for bug bounty and ethical hack…☆37Aug 19, 2026Updated 2 weeks ago
- Token impersonation. Administrator to SYSTEM. No tools required.☆17Mar 26, 2026Updated 5 months ago
- A Collection of Wordlists for Penetration Testing☆42Mar 13, 2026Updated 5 months ago
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆38Sep 28, 2025Updated 11 months ago
- Free BugBounty KrazePlanetTraining☆60Dec 17, 2025Updated 8 months ago
- 透過線上購物網站來實際操作來體驗 OWASP Top 10 各項資安問題☆11Nov 23, 2021Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Discover how I configured Microsoft Server 2022 on a Virtual Machine for Active Directory, set up a Domain Controller, and created over 1…☆12Apr 8, 2024Updated 2 years ago
- Extract DPAPI CREDHIST and Masterkey hashes☆22May 28, 2026Updated 3 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆38Jul 4, 2026Updated last month
- Active Directory forensic framework☆16May 18, 2026Updated 3 months ago
- Opengrep playground: a desktop app to craft Opengrep rules☆30Updated this week
- Resources, research, and tools for securing AI systems☆31Aug 11, 2025Updated last year
- NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js☆92Apr 12, 2025Updated last year
- Collection of self-made Red Team tools that have come in handy☆12Aug 25, 2024Updated 2 years ago
- Challenge repository for ACSC 2024☆13Apr 2, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- little scripts of bash stuff that i've found handy.☆16Feb 2, 2019Updated 7 years ago
- PAYGoat is a banking application built for educational purposes, focused on exploring and understanding common business logic flaws in fi…☆199Mar 11, 2026Updated 5 months ago
- Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application p…☆13Jun 4, 2022Updated 4 years ago
- ☆24Jun 17, 2024Updated 2 years ago
- Collection of various WINAPI tricks / features used or abused by Malware☆13Mar 28, 2022Updated 4 years ago
- ☆20Aug 4, 2026Updated 3 weeks ago
- PowerShell implementation for AD CS☆161Jul 30, 2026Updated last month
- ☆17Jul 14, 2024Updated 2 years ago
- ☆11Mar 8, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ✨ Open-source AI hackers for your apps 👨🏻💻☆34Sep 9, 2025Updated 11 months ago
- Reverse engineering CTFs.☆69Jan 25, 2026Updated 7 months ago
- Capture The Flag (CTF) writeups, covering various categories like Forensics, Cryptography, and more. Find step-by-step guides, tools used…☆15Aug 23, 2026Updated last week
- IOC/Hash scanner and IDS layer 4 designed to be portable and fast☆28Jan 28, 2026Updated 7 months ago
- Citrix Phishlet☆24Feb 2, 2021Updated 5 years ago
- Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges☆43Oct 27, 2024Updated last year
- Proof of Concept for CVE-2023-23397 in Python☆25Mar 21, 2023Updated 3 years ago