Collection of web app methodology from initial recon into exploit known vulnerability. Used when conducting Bug Bounty, Penetration Testing, or CTF
☆13Oct 23, 2021Updated 5 years ago
Alternatives and similar repositories for Web-App-Methodology
Users that are interested in Web-App-Methodology are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Welcome! This repo is a conglomeration of tips, tricks, tools, and data analysis to use while doing web application security assessments,…☆14Jan 13, 2019Updated 7 years ago
- ☆27Jan 25, 2020Updated 6 years ago
- A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…☆97Jun 5, 2021Updated 5 years ago
- My personal bug bounty toolkit.☆162Jun 18, 2024Updated 2 years ago
- DNS Misconfiguration : S0x4 - Same Site Scripting Scanner☆15Jan 20, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This is GitHub_Dorks and some tips i collect from different resources.Recon_Api is tip when you find token or api without knowing what to…☆21Sep 15, 2021Updated 5 years ago
- Apache Tomcat exploit and Pentesting guide for penetration tester☆66Sep 2, 2022Updated 4 years ago
- 'apk-yara-checker' is a little CLI tool written in Rust to check Yara rules against a folder of APK files.☆16Jul 6, 2024Updated 2 years ago
- HTML5 Training material for Attack and Secure training sessions.☆42Feb 25, 2023Updated 3 years ago
- List of pentest related scripts edited or created by GoVanguard☆11Nov 4, 2024Updated last year
- ☆29Mar 18, 2020Updated 6 years ago
- Convert your masscan/subdomain-scan results (80,443,8080) into screenshots for better analysis☆36Jul 10, 2018Updated 8 years ago
- A list of resources for those interested in getting started in bug bounties☆13Jun 18, 2020Updated 6 years ago
- ☆10Aug 13, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆18May 21, 2022Updated 4 years ago
- This repository contains the source code of the OWASP TOP 10 NodeJS Panel I have used☆10Nov 20, 2022Updated 3 years ago
- A Modern Operating System Written in C++ From Scratch!☆14Jan 30, 2022Updated 4 years ago
- FirePrint is a security tool for finding misconfigured Firebase realtime databases in Android or iOS applications.☆22Apr 4, 2024Updated 2 years ago
- ☆11Sep 17, 2021Updated 5 years ago
- Repository for OWASP Code Review document☆17Jun 24, 2014Updated 12 years ago
- sub domain wild card filtering tool☆39Apr 18, 2020Updated 6 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆17Feb 11, 2017Updated 9 years ago
- C# and Impacket implementation (here with Kerberos auth support) of PrintNightmare CVE-2021-1675/CVE-2021-34527☆29Jul 7, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SST39SF010A/020A/040 Arduino Mega Programmer☆12Mar 30, 2022Updated 4 years ago
- The OWASP Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and…☆19Aug 10, 2019Updated 7 years ago
- 😈 Hardware USB keylogger project with Arduino.☆17Feb 2, 2017Updated 9 years ago
- s3 brute force tool☆45May 7, 2021Updated 5 years ago
- Switch to JuicyPotato! https://github.com/decoder-it/juicy-potato☆12Feb 8, 2020Updated 6 years ago
- Install Script for CS☆11Aug 26, 2019Updated 7 years ago
- An Automation Tool Written in Python which uses Twitter and GitHub API☆14Jan 25, 2022Updated 4 years ago
- 🎉 Happy 4th anniversary to the ResetHacker community! 🎉☆11Aug 8, 2024Updated 2 years ago
- GetSimple CMS Custom JS Plugin Exploit RCE Chain☆11Mar 8, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆20Jan 14, 2026Updated 9 months ago
- ☆22Jul 26, 2022Updated 4 years ago
- Nothing special --- Some resources to save my time☆20Aug 14, 2020Updated 6 years ago
- Dorks for Google, Shodan and BinaryEdge☆143Mar 3, 2020Updated 6 years ago
- parsers to make life easier☆13Aug 21, 2020Updated 6 years ago
- C# Implementation of Jared Atkinson's Get-InjectedThread.ps1☆56Jul 11, 2021Updated 5 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago