Resources for developers and security engineers to learn the ropes of application security
☆96Nov 6, 2018Updated 7 years ago
Alternatives and similar repositories for appsec-resources
Users that are interested in appsec-resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp plugin that clusters responses to show an overview of received responses☆14Jun 7, 2019Updated 7 years ago
- Vulnerable Windows Driver with exploits which were used for demonstration purposes on Hunting and exploiting bugs in kernel drivers prese…☆13Jan 29, 2013Updated 13 years ago
- Windows Offline Common Password Hash Checker☆29Aug 9, 2016Updated 10 years ago
- Evil snippets of Underhanded Red Team tactics☆11Jul 5, 2017Updated 9 years ago
- Ruby Oracle Security Scanner☆16Jul 9, 2012Updated 14 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Various pentest scripts☆14Mar 17, 2014Updated 12 years ago
- Distributed password cracker for operating over high latency networks of loosely coupled hosts.☆13Jul 30, 2013Updated 13 years ago
- Burp extension to quickly and easily develop Python complex exploits based on Burp proxy requests.☆31Nov 29, 2015Updated 10 years ago
- Study about HQL injection exploitation.☆52May 15, 2016Updated 10 years ago
- Python Implementation of a .NET Padding Oracle Assessment Tool☆31Dec 17, 2015Updated 10 years ago
- Exploiting CVE-2016-0040 uninitialized pointer☆45Jul 17, 2016Updated 10 years ago
- An example of obtaining RCE via Redis and CSRF☆75Sep 11, 2016Updated 10 years ago
- Enumerate subdomains through Virustotal☆32Nov 2, 2019Updated 6 years ago
- Proof of Work generator☆12Jun 26, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Microsoft Office / COM Object DLL Planting☆15May 14, 2016Updated 10 years ago
- spring mvc cve-2014-3625☆32Mar 11, 2016Updated 10 years ago
- cve-2014-0130 rails directory traversal vuln☆18May 15, 2017Updated 9 years ago
- Simple script to automated the capture and merging process when using a hardware TAP☆15Mar 7, 2013Updated 13 years ago
- NTLM HTTP Authentication Session Tier Exploit☆15Jan 9, 2014Updated 12 years ago
- Exploit for Adobe Coldfusion BlazeDS Java Object Deserialization RCE☆11Feb 7, 2018Updated 8 years ago
- A Python-Based script designed to output stable and screen-scrapable lists of wireless networks☆15Jun 19, 2014Updated 12 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Jan 31, 2017Updated 9 years ago
- Application Security Vulnerability Periodic Table☆14Aug 25, 2014Updated 12 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- specific fuzzers based on AFL and fuzzing results☆42Oct 22, 2016Updated 9 years ago
- ActionScript Proof of Concept to perform cross-domain reads☆16Aug 26, 2013Updated 13 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆88Oct 6, 2017Updated 9 years ago
- static program analysis tool that generates return-oriented exploits for ELF binaries☆45Feb 9, 2018Updated 8 years ago
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- An in-development fork of the Riverloopsec Killerbee Project with additional tools / bugfixes☆11Jan 16, 2018Updated 8 years ago
- Growing list of potentially dangerous PHP functions☆52May 1, 2019Updated 7 years ago
- A backdoor embedded with Twitter Player Card☆12May 1, 2017Updated 9 years ago
- windows kernel vulnerability found by me☆87Aug 28, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- NAT Pinning test suite tool for penetration testers.☆31Feb 17, 2014Updated 12 years ago
- Scripts, tools, and proof-of-concepts to aid in a penetration test.☆96Jul 9, 2020Updated 6 years ago
- DNS Enumeration and Reconnaissance Tool☆36Jan 19, 2016Updated 10 years ago
- Security tools to use on assessments.☆41May 9, 2016Updated 10 years ago
- ☆16Oct 23, 2015Updated 10 years ago
- A better SSL cipher checker using gnutls☆28May 17, 2017Updated 9 years ago
- "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protecti…☆137Dec 22, 2017Updated 8 years ago