OWASP based Web Application Security Testing Checklist
☆88Jul 19, 2024Updated 2 years ago
Alternatives and similar repositories for OWASP-Testing-Guide-Checklist
Users that are interested in OWASP-Testing-Guide-Checklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Receive email alerts on successful ssh logins based on a predefined IP whitelist OR a predefined IP country origin whitelist (using gmail…☆26Jul 19, 2024Updated 2 years ago
- Receive email alerts on successful ssh logins based on a predefined IP whitelist OR a predefined IP country origin whitelist (using mailg…☆27Jul 19, 2024Updated 2 years ago
- A spreadsheet designed to automatically generate Key Performance Indicators (charts) for Cyber Security Services based on documented data…☆31Jul 19, 2024Updated 2 years ago
- This vulnerability allows an attacker to bypass the credentials brute-force prevention mechanism of the Embedded Web Server (interface) o…☆91Jul 19, 2024Updated 2 years ago
- ☆27Jun 24, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesyst…☆182Jul 19, 2024Updated 2 years ago
- The purpose of this tool is: 1. to transliterate and generate possible usernames out of a full names list that may include names written …☆139Jul 19, 2024Updated 2 years ago
- A compact guide to network pivoting for penetration testings / CTF challenges.☆228Jul 19, 2024Updated 2 years ago
- A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highli…☆413Jan 19, 2025Updated last year
- ☆19Aug 31, 2023Updated 3 years ago
- A Python http(s) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving con…☆140Jul 19, 2024Updated 2 years ago
- visually see issues with supported cipher suites☆19May 28, 2026Updated 4 months ago
- undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it ge…☆54Jul 17, 2025Updated last year
- PDump is a project for dumping leaked credentials from DEHASHED☆17Jan 21, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆17Aug 30, 2025Updated last year
- Bug Hunting Handbook☆12Aug 11, 2022Updated 4 years ago
- Basic brute-force script targeting the standard Keycloak Admin/User Console browser login flow.☆27Apr 6, 2025Updated last year
- Publicly available training resources used by Security PS to train application security engineers☆10Feb 16, 2021Updated 5 years ago
- Brahmastra empowers security teams to fortify their defenses and identify potential vulnerabilities in their systems. This comprehensive …☆19Aug 20, 2023Updated 3 years ago
- x86_64 LKM linux rootkit☆17Jul 1, 2023Updated 3 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆18Sep 29, 2022Updated 4 years ago
- Xss payload for bypassing waf☆20Apr 18, 2020Updated 6 years ago
- View screenshots as a slideshow over http☆15Mar 13, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Generates millions of keyword-based password mutations in seconds.☆1,470Jun 8, 2025Updated last year
- Red Team Operations Architecture Map Comprehensive Operator Reference — From Infrastructure to Impact☆31Sep 15, 2026Updated 3 weeks ago
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆13Dec 29, 2020Updated 5 years ago
- Dockerized nginx app used to create high-level timeline visuals for red team assessments☆36Feb 25, 2026Updated 7 months ago
- eLdap is a tool that helps users searching and filtering queries in Ldap environment.☆19Apr 22, 2022Updated 4 years ago
- 🐶 A curated list of Web Security materials and resources. With repository stars⭐ and forks🍴☆23Oct 6, 2026Updated last week
- An XSS exploitation command-line interface and payload generator.☆1,493Jan 19, 2025Updated last year
- 💣 Dockerized penetration-testing/bugbounty/app-sec testing environment☆35Nov 24, 2021Updated 4 years ago
- Autohack is a scripting framework to help save you time. Whether you're in a hurry or have a lot of time on your hands, learning and reme…☆17Apr 8, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CLI tool that extracts a regex pattern from a list of urls ( Rust )☆62Sep 14, 2022Updated 4 years ago
- Quick tool to create custom wordlists like how fuzzers work☆10Sep 29, 2023Updated 3 years ago
- Reverse Shell troll software☆12Sep 24, 2019Updated 7 years ago
- ⚡️ Multiple target ZAP Scanning☆115Oct 3, 2026Updated last week
- An operator-focused XSL stylesheet that transforms Nmap XML output into a clear, service-centric HTML report designed for use during acti…☆15Feb 3, 2026Updated 8 months ago
- A tool for automated security scanning of web applications. Many features are also present for manual penetration testing.☆31Aug 29, 2014Updated 12 years ago
- A GO module to get domain name from SSL certificates when an IP address is provided.☆33Apr 14, 2023Updated 3 years ago