Archive of the Top 10 Web Hacking Techniques - every nominee since 2006, preserved
☆910Oct 31, 2026Updated this week
Alternatives and similar repositories for webhacklist
Users that are interested in webhacklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SSRF (Server Side Request Forgery) testing resources☆2,511Oct 12, 2024Updated 2 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆996Dec 31, 2021Updated 4 years ago
- Prototype Pollution and useful Script Gadgets☆1,659Jan 27, 2024Updated 2 years ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆2,122Jan 2, 2024Updated 2 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆619Mar 4, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆703Nov 27, 2024Updated last year
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,818Apr 26, 2024Updated 2 years ago
- This challenge is Inon Shkedy's 31 days API Security Tips.☆2,241Apr 20, 2022Updated 4 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- Reverse proxies cheatsheet☆1,890Nov 4, 2023Updated 2 years ago
- A collection of custom security tools for quick needs.☆3,352Oct 18, 2026Updated 2 weeks ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥☆7,661Aug 26, 2026Updated 2 months ago
- Client Side Prototype Pollution Scanner☆532Sep 17, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆1,082Jan 3, 2025Updated last year
- A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆1,336Jan 26, 2024Updated 2 years ago
- A collection of hacks and one-off scripts☆2,518Mar 13, 2025Updated last year
- ☆1,203Sep 2, 2022Updated 4 years ago
- ☆701Jul 4, 2022Updated 4 years ago
- Hunting Bugs for Fun and Profit☆272Jul 29, 2020Updated 6 years ago
- A curated list of amazingly awesome Burp Extensions☆3,450Aug 15, 2026Updated 2 months ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Sep 7, 2026Updated last month
- List DTDs and generate XXE payloads using those local DTDs.☆664Feb 21, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.☆111Feb 14, 2022Updated 4 years ago
- A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques☆744May 4, 2019Updated 7 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆403Aug 15, 2024Updated 2 years ago
- 🔪Browser logic vulnerabilities☆705Jan 23, 2021Updated 5 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- This repository contains all the XSS cheatsheet data to allow contributions from the community.☆476Oct 23, 2026Updated last week
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- BBT - Bug Bounty Tools (examples💡)☆1,912Apr 5, 2024Updated 2 years ago
- This tool generates gopher link for exploiting SSRF and gaining RCE in various servers☆3,428Apr 18, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Apache Solr Injection Research☆580Jan 28, 2020Updated 6 years ago
- ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.☆2,352Jul 8, 2026Updated 3 months ago
- A tool which scrapes public github repositories for common naming conventions in variables, folders and files☆297Jun 3, 2024Updated 2 years ago
- A collection of pentest and development tips☆1,122May 26, 2022Updated 4 years ago
- A powerful browser crawler for web vulnerability scanners☆3,047Mar 11, 2025Updated last year
- A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me☆2,399Nov 29, 2024Updated last year
- Various Payload wordlists☆243Jul 31, 2026Updated 3 months ago