Files for appsecwiki.com
☆122Jul 7, 2020Updated 6 years ago
Alternatives and similar repositories for app-sec-wiki
Users that are interested in app-sec-wiki are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- OASAM is the acronym of Open Android Security Assessment Methodology and its purpose is to become a reference framework on Android applic…☆84Apr 11, 2022Updated 4 years ago
- A backdoor embedded with Twitter Player Card☆12May 1, 2017Updated 9 years ago
- CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.☆135Sep 25, 2019Updated 7 years ago
- The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and ai…☆14Dec 17, 2018Updated 7 years ago
- This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.☆22Sep 14, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Bug Bounty Tools☆34Jul 2, 2020Updated 6 years ago
- A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials☆10Jun 30, 2021Updated 5 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 5 years ago
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆50Feb 27, 2019Updated 7 years ago
- A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status☆87Oct 29, 2020Updated 6 years ago
- gorobots - robots.txt recon & path discovery in Go. Structured parsing, 29-category sensitivity classification, concurrent path probing, …☆19Apr 10, 2026Updated 6 months ago
- Parse X509 certificates to get the (sub)domains in it.☆28Jun 14, 2018Updated 8 years ago
- Example Material for SecureState's 2016 Python for Pentesters Webinar☆10Dec 13, 2016Updated 9 years ago
- A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)☆16Aug 29, 2018Updated 8 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A front-end JavaScript toolkit for creating DNS rebinding attacks.☆45Jun 19, 2018Updated 8 years ago
- check cmd execute☆14Feb 4, 2017Updated 9 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆358Oct 14, 2020Updated 6 years ago
- This application is developed to test the race condition vulnerability in the web application. We have discussed about this vulnerability…☆14Oct 1, 2016Updated 10 years ago
- HTML source files demonstrating HTML5 postmessage vulnerabilities☆19Jul 26, 2020Updated 6 years ago
- A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!☆35Nov 17, 2018Updated 7 years ago
- ☆31Apr 6, 2021Updated 5 years ago
- Burp extension to decode NTLM SSP headers and extract domain/host information☆31Mar 11, 2021Updated 5 years ago
- A small web app to check if your (Australian) voicemail is vulnerable to information disclosure.☆13Jul 15, 2014Updated 12 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Java-Web-Security - Sichere Webanwendungen mit Java entwickeln☆222Updated this week
- An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions☆121Jan 9, 2018Updated 8 years ago
- VulHint是辅助代码审计的 sublime text 3 插件☆65Nov 8, 2018Updated 7 years ago
- ☆20Aug 15, 2020Updated 6 years ago
- a parser + crawler for .DS_Store files exposed publically☆56Jun 6, 2023Updated 3 years ago
- A realistic windows testlab deployment tool☆12Feb 24, 2017Updated 9 years ago
- Easy Fast recon script☆30Sep 15, 2019Updated 7 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,510Oct 12, 2024Updated 2 years ago
- Script to test if a server is vulnerable to the JetLeak vulnerability☆144Jul 1, 2016Updated 10 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Personal Notes.☆11Jun 2, 2018Updated 8 years ago
- Tool for checking reflecting Parameters in a URL.☆10Aug 31, 2020Updated 6 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Dec 12, 2018Updated 7 years ago
- Facebook Bug Bounties☆106Feb 24, 2021Updated 5 years ago
- ZIP File Raider - Burp Extension for ZIP File Payload Testing☆71Aug 31, 2020Updated 6 years ago
- Application Security Vulnerability Periodic Table☆14Aug 25, 2014Updated 12 years ago
- Repository for all the workshop content delivered at nullcon X on 1st of March 2019☆79Apr 4, 2019Updated 7 years ago