This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities
☆95Jun 11, 2023Updated 3 years ago
Alternatives and similar repositories for White-box-pentesting
Users that are interested in White-box-pentesting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Penetration Testing Lab☆31Jul 17, 2014Updated 12 years ago
- Script to manage and create local pentesting training virtual lab☆53Jun 7, 2020Updated 6 years ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Sep 23, 2020Updated 5 years ago
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 7 years ago
- Pentesting lab with a Kali Linux instance accessible via ssh & wireguard VPN and with vulnerable instances in a private subnet☆197Jul 4, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Local penetration testing lab using docker-compose.☆217Jun 17, 2025Updated last year
- ☆15Sep 11, 2020Updated 5 years ago
- ☆136Feb 5, 2021Updated 5 years ago
- Notes on Preparing for Offsec☆31Jul 24, 2023Updated 3 years ago
- Red Team Attack Lab for TTP testing & research☆595May 15, 2023Updated 3 years ago
- ☆13Mar 27, 2021Updated 5 years ago
- Notes for CRTP☆43Dec 18, 2020Updated 5 years ago
- Scripts and misc. stuff related to the PortSwigger Web Academy☆17Feb 6, 2022Updated 4 years ago
- OSWE Preparation☆686Jul 25, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This repository will contain all trainings and tutorials I have done/read to prepare for OSWE / AWAE.☆247Sep 2, 2019Updated 6 years ago
- This tool will scan all the URL's in the file and will provide Content-Length, Status-Code, Server and more.☆36Dec 22, 2021Updated 4 years ago
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- A simple Node.js Express REST app with some OWASP vulnerabilities.☆25May 14, 2026Updated 2 months ago
- This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with t…☆948Jan 6, 2025Updated last year
- HTML source files demonstrating HTML5 postmessage vulnerabilities☆20Jul 26, 2020Updated 5 years ago
- Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...☆129Aug 13, 2021Updated 4 years ago
- An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.☆47Jan 22, 2025Updated last year
- OSWE-cheat sheet module by module with updated syllabus☆12May 25, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Vulnerable SAML infrastructure training applicaiton☆55Feb 2, 2023Updated 3 years ago
- Vagrant VirtualBox environment for conducting an internal network penetration test☆1,000Jun 5, 2023Updated 3 years ago
- Repo for OSWE related video content for @SecAura Youtube Channel☆39Feb 21, 2022Updated 4 years ago
- Stuff done in preparation for AWAE course and OSWE certification☆156Oct 29, 2020Updated 5 years ago
- ☆22Dec 1, 2021Updated 4 years ago
- A collection of everything I learn while working as a pentester, doing certifications, bug bounty hunting or playing CTFs.☆20Nov 13, 2025Updated 8 months ago
- 0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover☆57Dec 15, 2020Updated 5 years ago
- https://github.com/timip/OSWE☆19Dec 2, 2019Updated 6 years ago
- Bash script to automate Bug Bounty Reconnaissance☆45Jan 3, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆17Jan 2, 2020Updated 6 years ago
- Learn 101 is a challenge to keep the learning spirit going on and challenge myself to learn something daily for 101 days.☆30Jun 7, 2022Updated 4 years ago
- ASLR Evasion, Egghunters, SEH Overwrites☆29Mar 6, 2021Updated 5 years ago
- A python based blind SQL injection exploitation script☆144Jan 26, 2020Updated 6 years ago
- red team tips and trix☆12Jun 27, 2025Updated last year
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆133Feb 19, 2021Updated 5 years ago
- ☆27Jun 2, 2023Updated 3 years ago