This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities
☆95Jun 11, 2023Updated 3 years ago
Alternatives and similar repositories for White-box-pentesting
Users that are interested in White-box-pentesting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Penetration Testing Lab☆31Jul 17, 2014Updated 12 years ago
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 8 years ago
- Script to manage and create local pentesting training virtual lab☆54Jun 7, 2020Updated 6 years ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Sep 23, 2020Updated 6 years ago
- Pentesting lab with a Kali Linux instance accessible via ssh & wireguard VPN and with vulnerable instances in a private subnet☆199Jul 4, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Local penetration testing lab using docker-compose.☆224Jun 17, 2025Updated last year
- A simple Node.js Express REST app with some OWASP vulnerabilities.☆28May 14, 2026Updated 5 months ago
- ☆15Sep 11, 2020Updated 6 years ago
- ☆137Feb 5, 2021Updated 5 years ago
- Red Team Attack Lab for TTP testing & research☆596May 15, 2023Updated 3 years ago
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- Notes on Preparing for Offsec☆33Jul 24, 2023Updated 3 years ago
- HTML source files demonstrating HTML5 postmessage vulnerabilities☆19Jul 26, 2020Updated 6 years ago
- This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.☆249Sep 2, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Vagrant VirtualBox environment for conducting an internal network penetration test☆1,018Jun 5, 2023Updated 3 years ago
- OSWE Preparation☆689Jul 25, 2022Updated 4 years ago
- Notes for CRTP☆44Dec 18, 2020Updated 5 years ago
- Scripts and misc. stuff related to the PortSwigger Web Academy☆17Feb 6, 2022Updated 4 years ago
- ☆13Mar 27, 2021Updated 5 years ago
- ☆91May 1, 2023Updated 3 years ago
- This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with t…☆949Jan 6, 2025Updated last year
- This tool will scan all the URL's in the file and will provide Content-Length, Status-Code, Server and more.☆37Dec 22, 2021Updated 4 years ago
- Intentionaly very vulnerable API with bonus bad coding practices☆55Sep 25, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.☆47Jan 22, 2025Updated last year
- OSWE-cheat sheet module by module with updated syllabus☆13May 25, 2021Updated 5 years ago
- Vulnerable SAML infrastructure training applicaiton☆57Feb 2, 2023Updated 3 years ago
- https://github.com/timip/OSWE☆19Dec 2, 2019Updated 6 years ago
- Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...☆135Aug 13, 2021Updated 5 years ago
- GetSimple CMS Custom JS Plugin Exploit RCE Chain☆11Mar 8, 2023Updated 3 years ago
- 0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover☆57Dec 15, 2020Updated 5 years ago
- TUDO — A Vulnerable PHP Web App☆149Oct 19, 2026Updated 2 weeks ago
- A collection of everything I learn while working as a pentester, doing certifications, bug bounty hunting or playing CTFs.☆20Nov 13, 2025Updated 11 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆22Dec 1, 2021Updated 4 years ago
- Bash script to automate Bug Bounty Reconnaissance☆46Jan 3, 2021Updated 5 years ago
- Learn 101 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for 101 days.☆30Jun 7, 2022Updated 4 years ago
- Repo for OSWE related video content for @SecAura Youtube Channel☆39Feb 21, 2022Updated 4 years ago
- ☆17Jan 2, 2020Updated 6 years ago
- Audit your Google Cloud Platform (GCP) project for LIST permissions — fast, efficient, and with visibility.☆14May 7, 2025Updated last year
- Stuff done in preparation for AWAE course and OSWE certification☆156Oct 29, 2020Updated 6 years ago