🎓 Roadmap to conquer PortSwigger Web Security Academy labs — SQLi, XSS, CSRF & more 🛡️🕵️♂️
☆20Jun 26, 2025Updated last year
Alternatives and similar repositories for portswigger-academy
Users that are interested in portswigger-academy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆28Oct 8, 2026Updated 3 weeks ago
- 在EHole_magic原本的基础上新增获取quake资产，调整hunter资产获取，指纹更新到2.2w☆14Aug 1, 2025Updated last year
- ☆28Oct 17, 2026Updated 3 weeks ago
- eJPTv2 Essentials: Notes & Machines to crush the eJPTv2 Exam.☆69Sep 1, 2025Updated last year
- Master web security: OWASP Top 10, XSS, SQLi, CSRF, and secure coding practices. Includes labs, tools, and examples for secure web develo…☆11Jul 16, 2026Updated 3 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Introducing "Dork Engine" – the ultimate bug bounty tool! Open multiple Google Dorks with a click, making vulnerability discovery and sen…☆14Feb 7, 2026Updated 8 months ago
- Wordpress Hunting Vulnerabilities and Bruteforce tool using Google Dork☆15Sep 16, 2021Updated 5 years ago
- LaTeX report template for Ho Chi Minh University of Technology (HCMUT-VNU)☆72Aug 19, 2026Updated 2 months ago
- ☆23Sep 8, 2017Updated 9 years ago
- This project is based on the Yenn.exe branch submitted by the hexstrike community, with modifications added and areas for improvement.☆13Apr 21, 2026Updated 6 months ago
- Curated reference of file magic bytes for file type identification and forensics.☆16Jan 19, 2026Updated 9 months ago
- ☆20Aug 27, 2025Updated last year
- CCNA study notes to complement modern Software Engineering skills with Networking fundamentals☆25Sep 4, 2024Updated 2 years ago
- Advanced & Fast Google Dorking Tool☆27Apr 25, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An intelligent web crawler built in Go that extracts email addresses from websites with precision and speed.☆30Apr 19, 2026Updated 6 months ago
- 个人漏洞收集项目，包括复现环境、POC、EXP等☆28Mar 14, 2025Updated last year
- My notes/solutions to the problems in "The Web Application Hacker's Handbook" (https://portswigger.net/web-security/web-application-hacke…☆31Jan 22, 2024Updated 2 years ago
- Here are some common interview questions for an application security position you can review for your own interview, along with example a…☆34Apr 17, 2022Updated 4 years ago
- ehole超大指纹☆34Jul 25, 2025Updated last year
- Roadmap (Belajar) Menjadi IoT Developer☆30Aug 21, 2024Updated 2 years ago
- A cheatsheet for your eJPT exam☆19Dec 26, 2025Updated 10 months ago
- From Zero To Hero☆35Apr 15, 2026Updated 6 months ago
- GoFinger是一款专为红队攻防和企业资产管理设计的下一代web指纹发现、指纹识别工具。基于 Go 语言开发，它不仅继承了传统指纹工具的识别能力，更在性能、可扩展性和输出质量上进行了深度优化。 它旨在帮助安全工程师和渗透测试人员快速、精准地识别网络资产指纹，并以美观、易…☆43Nov 27, 2025Updated 11 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Want to become an Application Security Engineer? Here's a roadmap to help you get there.☆46Sep 3, 2022Updated 4 years ago
- ReconPro is a specialized Google dorking tool designed for cybersecurity professionals and bug bounty hunters.☆48Mar 22, 2026Updated 7 months ago
- 🚀 Advanced XSS Scanner Tool with WAF Detection & Browser Verification | 80+ Payloads | Multi-threaded | Professional Reporting☆13Jul 5, 2025Updated last year
- Simple-XSS is a multiplatform cross-site scripting (XSS) vulnerability exploitation tool.☆49Jul 2, 2025Updated last year
- Web安全测试中常用的爆破字典，包括网站后台、文件包含、WebShell密码、常用管理员用户名及密码等等！☆42Apr 26, 2019Updated 7 years ago
- A slick, modern, privacy-focused web interface for viewing and analyzing Nuclei scan results. Built for pentesters & bug hunters who want…☆31Mar 31, 2025Updated last year
- picoCTF 2024 Writeup (Capture the Flag Competition) with the solutions for the challenges.☆57Nov 27, 2025Updated 11 months ago
- Open-source penetration test report writing tool. Write, manage, and export professional pentest reports — fast.☆29Mar 8, 2026Updated 7 months ago
- This repo has the comprehensive Cheatsheet that I made during my eJPT exam prep...☆56Jul 27, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- List of OSINT Capture The Flag platforms☆82Mar 27, 2026Updated 7 months ago
- Advanced CVE Finder with potential public exploit! Searching via Shodan query, organization name or even hostname☆34Dec 22, 2025Updated 10 months ago
- 30 Claude Code Skills + 60+ integrated tools for HackerOne/Bugcrowd bug bounty hunters☆45Jun 2, 2026Updated 5 months ago
- Roadmap for Web Application Penetration Testing | FREE Resources (Not Pirated)☆461Aug 25, 2023Updated 3 years ago
- KaliAI is an advanced AI assistant designed to help security professionals and ethical hackers leverage Kali Linux tools effectively and …☆55Mar 25, 2025Updated last year
- A cheatsheet for common JavaScript sources and sinks that lead to potential vulnerabilities.☆69Jun 13, 2023Updated 3 years ago
- SSTI – Advanced / Polyglot Payloads☆39Jan 24, 2026Updated 9 months ago