OWASP based Web Application Security Testing Checklist
☆86Jul 19, 2024Updated 2 years ago
Alternatives and similar repositories for OWASP-Testing-Guide-Checklist
Users that are interested in OWASP-Testing-Guide-Checklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Receive email alerts on successful ssh logins based on a predefined IP whitelist OR a predefined IP country origin whitelist (using mailg…☆27Jul 19, 2024Updated 2 years ago
- A spreadsheet designed to automatically generate Key Performance Indicators (charts) for Cyber Security Services based on documented data…☆31Jul 19, 2024Updated 2 years ago
- Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)☆18Jul 19, 2024Updated 2 years ago
- ☆48Jul 19, 2024Updated 2 years ago
- This vulnerability allows an attacker to bypass the credentials brute-force prevention mechanism of the Embedded Web Server (interface) o…☆91Jul 19, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesyst…☆182Jul 19, 2024Updated 2 years ago
- The purpose of this tool is: 1. to transliterate and generate possible usernames out of a full names list that may include names written …☆140Jul 19, 2024Updated 2 years ago
- A compact guide to network pivoting for penetration testings / CTF challenges.☆227Jul 19, 2024Updated 2 years ago
- A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highli…☆410Jan 19, 2025Updated last year
- ☆18Aug 31, 2023Updated 2 years ago
- A Python http(s) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving con…☆141Jul 19, 2024Updated 2 years ago
- visually see issues with supported cipher suites☆19May 28, 2026Updated last month
- undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it ge…☆54Jul 17, 2025Updated last year
- PDump is a project for dumping leaked credentials from DEHASHED☆17Jan 21, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆18Aug 30, 2025Updated 10 months ago
- Bug Hunting Handbook☆12Aug 11, 2022Updated 3 years ago
- Basic brute-force script targeting the standard Keycloak Admin/User Console browser login flow.☆27Apr 6, 2025Updated last year
- Publicly available training resources used by Security PS to train application security engineers☆10Feb 16, 2021Updated 5 years ago
- Quick share notes on HackMD☆18Apr 26, 2024Updated 2 years ago
- x86_64 LKM linux rootkit☆17Jul 1, 2023Updated 3 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆18Sep 29, 2022Updated 3 years ago
- Xss payload for bypassing waf☆19Apr 18, 2020Updated 6 years ago
- Generates millions of keyword-based password mutations in seconds.☆1,459Jun 8, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- View screenshots as a slideshow over http☆15Mar 13, 2020Updated 6 years ago
- Brahmastra empowers security teams to fortify their defenses and identify potential vulnerabilities in their systems. This comprehensive …☆19Aug 20, 2023Updated 2 years ago
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆13Dec 29, 2020Updated 5 years ago
- Dockerized nginx app used to create high-level timeline visuals for red team assessments☆32Feb 25, 2026Updated 4 months ago
- eLdap is a tool that helps users searching and filtering queries in Ldap environment.☆19Apr 22, 2022Updated 4 years ago
- An XSS exploitation command-line interface and payload generator.☆1,438Jan 19, 2025Updated last year
- 💣 Dockerized penetration-testing/bugbounty/app-sec testing environment☆35Nov 24, 2021Updated 4 years ago
- An operator-focused XSL stylesheet that transforms Nmap XML output into a clear, service-centric HTML report designed for use during acti…☆15Feb 3, 2026Updated 5 months ago
- CLI tool that extracts a regex pattern from a list of urls ( Rust )☆62Sep 14, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ⚡️ Multiple target ZAP Scanning☆111Updated this week
- Quick tool to create custom wordlists like how fuzzers work☆10Sep 29, 2023Updated 2 years ago
- Reverse Shell troll software☆12Sep 24, 2019Updated 6 years ago
- A GO module to get domain name from SSL certificates when an IP address is provided.☆33Apr 14, 2023Updated 3 years ago
- Most Responder's configuration power in your hand.☆54Jan 19, 2025Updated last year
- When I'm doing my job I'm trying to set my working place as efficient and useful as it's possible. Bash terminal is my main everyday prog…☆10May 19, 2023Updated 3 years ago
- ☆14Feb 12, 2026Updated 5 months ago