All Apprentice and Practitioner-level Portswigger labs
☆44May 18, 2023Updated 3 years ago
Alternatives and similar repositories for Portswigger-Labs
Users that are interested in Portswigger-Labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repository to gather the BOF files I will be developing☆12Oct 1, 2024Updated last year
- Repository to gather the .NET malware I will be developing☆20Mar 7, 2026Updated 6 months ago
- Obfuscate payloads using IPv4, IPv6, MAC or UUID strings☆25Feb 17, 2024Updated 2 years ago
- Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)☆24Oct 23, 2021Updated 4 years ago
- PoC to self-delete a binary in C#☆36Feb 6, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Remap ntdll.dll using only NTAPI functions with a suspended process☆28Apr 13, 2025Updated last year
- A tool to analyze Ntds.dit files once the NTLM and LM hashes have been cracked.☆16May 13, 2021Updated 5 years ago
- Parser of the industrial protocol S7 (S7comm) using Libpcap☆15May 1, 2020Updated 6 years ago
- Script to extract the cached credentials from SSSD, getting Active Directory credentials from Unix systems☆26Jun 14, 2023Updated 3 years ago
- P/Invoke definitions from the most-of-the-time offline offline pinvoke.net. Website: https://ricardojoserf.gitbook.io/pinvoke☆24Mar 23, 2025Updated last year
- OSCP preperation and HackTheBox write ups.☆64Apr 2, 2023Updated 3 years ago
- Solutions from @PortSwigger labs☆15Apr 11, 2024Updated 2 years ago
- This repository contains my writeups for the labs in PortSwigger's Web Security Academy platform. Each lab writeup includes the lab's nam…☆115Jul 14, 2025Updated last year
- 🐞 Understand how cross-site scripting occurs, how to detect and exploit XSS vulnerabilities, giving you control of other visitor's brows…☆13Nov 24, 2025Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Impersonate Tokens using only NTAPI functions☆84Apr 4, 2025Updated last year
- Vulnserver exploits☆14May 1, 2020Updated 6 years ago
- This tool is useful in case you want to evade the detection based on simple rules when trying to dump the SAM, SYSTEM or SECURITY hives u…☆10Aug 31, 2022Updated 4 years ago
- Virtual machines and scripts to attack WPA2-Enterprise networks through Rogue Access Points downgrading the authentication method to GTC☆65May 29, 2023Updated 3 years ago
- A cross-platform tool to find traces of old SIDs remaining in LDAP objects of the Active Directory☆26Jun 29, 2025Updated last year
- Abusing Remote Windows SMB Shares for Fun and Pen Testing☆16May 23, 2023Updated 3 years ago
- EMQX Dashboard Malicious Plugin leading to RCE☆47Jun 16, 2025Updated last year
- https://www.nu11secur1ty.com☆23Jul 1, 2026Updated 2 months ago
- BypassCredGuard CS BOF☆54Jan 23, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection Of Reverse Shell that can easily generate using Python3☆61Jan 25, 2024Updated 2 years ago
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆59Jul 13, 2025Updated last year
- A repository for all the THM & HTB challenges that I've solved!☆44May 3, 2024Updated 2 years ago
- Different methods to get current username without using whoami☆187Feb 12, 2024Updated 2 years ago
- Most powerfull Wifi Jammier.with fixes.☆12Oct 14, 2022Updated 3 years ago
- Echo Hack The Talk Materials 2019☆12Sep 12, 2019Updated 7 years ago
- Advanced XSS covers techniques to bypass modern web security measures like blacklists, filters, and Content Security Policy (CSP). It foc…☆20Mar 6, 2026Updated 6 months ago
- Shell script to set up Kali VMs for CTFs - installs tools and adds aliases to Bash and Zsh profiles.☆16Dec 30, 2025Updated 8 months ago
- Exploits written while preparing for the OSED exam☆28Apr 30, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Vulnerable (on purpose) programs to leak NtReadVirtualMemory address for stealthier API resolution (no GetProcAddress, GetModuleHandle or…☆42Dec 22, 2025Updated 8 months ago
- Tinder user searcher and DB creation. Proof of concept for Tinder security team☆20Mar 26, 2019Updated 7 years ago
- Hackthebox tools☆13Mar 3, 2019Updated 7 years ago
- Google Drive, OneDrive and Youtube as covert-channels - Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or…☆72Oct 31, 2021Updated 4 years ago
- Example of C# heap injector for x64 and x86 shellcodes☆14Jan 1, 2023Updated 3 years ago
- Driver Buddy Revolutions for Ghidra☆50Mar 28, 2026Updated 5 months ago
- A not-curated list of cloud hacking labs☆27Apr 18, 2024Updated 2 years ago