kyawthiha7 / pentest-methodologyView external linksLinks
☆79Apr 3, 2019Updated 6 years ago
Alternatives and similar repositories for pentest-methodology
Users that are interested in pentest-methodology are comparing it to the libraries listed below
Sorting:
- When it comes to exploiting web application security, this is a methodology. Enumeration and Networking guidelines are also listed to hel…☆24Nov 18, 2025Updated 2 months ago
- Penetration Testing Methodology - short notes☆11May 30, 2015Updated 10 years ago
- Short checklists for penetration testing methodology☆200Sep 5, 2023Updated 2 years ago
- Droz_scan is a automated script, that runs all the queries of drozer in a single run☆26May 15, 2023Updated 2 years ago
- ☆15Aug 27, 2020Updated 5 years ago
- Store ZAP reports historically and compare current ZAP results against the most recent for changes in alerts.☆12Feb 10, 2026Updated last week
- This repository provides examples of Vulnerable and Mitigated code as per CWE Categorization.☆23May 4, 2024Updated last year
- Spongebob-themed cypher injection playground☆13Jun 4, 2023Updated 2 years ago
- A curated list of awesome appsec tools available on Ubuntu 🗄️☆12Mar 4, 2024Updated last year
- ☆15Sep 11, 2020Updated 5 years ago
- eCPPTv2 Notes☆13Jun 13, 2021Updated 4 years ago
- SQL injection via unsanitized QuerySet.order_by() input☆13Jul 10, 2021Updated 4 years ago
- Burp Suite extension that makes your life easier by tucking the headers out of the way, so you can see the body content right away withou…☆39Oct 23, 2023Updated 2 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applica…☆22May 14, 2025Updated 9 months ago
- ActionScript Proof of Concept to perform cross-domain reads☆16Aug 26, 2013Updated 12 years ago
- This repository is intended for sharing files/tools/tutorials..etc that related to eCPPTv2 from eLearnSecurity☆64Nov 10, 2019Updated 6 years ago
- ☆15Jan 27, 2022Updated 4 years ago
- Central IoC scanner based on Loki☆20Nov 12, 2021Updated 4 years ago
- Fast tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com with standard and advanced search…☆114Nov 3, 2021Updated 4 years ago
- Xssor.go is a xss reflections checker for urls☆71Mar 22, 2023Updated 2 years ago
- ☆70Sep 15, 2023Updated 2 years ago
- ☆42Oct 28, 2021Updated 4 years ago
- Automatic Bug finder with buprsuite☆166Mar 6, 2023Updated 2 years ago
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆125Apr 10, 2024Updated last year
- ☆20May 18, 2022Updated 3 years ago
- A BurpSuite extension that allows you to use Chromium with PwnFox☆42Dec 23, 2025Updated last month
- OpenAEV Docker deployment helpers☆28Updated this week
- Funter (Forms Hunter) is a tool that hunts all forms and inputs found in a list of urls.☆19Jul 1, 2023Updated 2 years ago
- jmreport/qurestSql 未授权SQL注入批量扫描poc Jeecg-Boot是一款基于Spring Boot和Jeecg-Boot-Plus的快速开发平台，最新的jeecg-boot 3.5.0 中被爆出多个SQL注入漏洞。☆21Jun 20, 2023Updated 2 years ago
- A tool for steganography of png files .☆24Jul 27, 2022Updated 3 years ago
- Wazuh extension looking up alert data against indicators in OpenCTI threat intel☆21Feb 4, 2024Updated 2 years ago
- Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/☆45Aug 28, 2022Updated 3 years ago
- Virtual host wordlist☆51Jan 12, 2021Updated 5 years ago
- 📚A curated list of product security resources.☆22Jun 11, 2025Updated 8 months ago
- Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder☆269Jan 28, 2024Updated 2 years ago
- ☆345Oct 23, 2022Updated 3 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆373Jul 25, 2023Updated 2 years ago
- Application Security pipelines☆51May 25, 2022Updated 3 years ago