Notes I've taken while working through various web app pentesting labs.
☆91Apr 26, 2018Updated 8 years ago
Alternatives and similar repositories for Web-App-Hacking-Notes
Users that are interested in Web-App-Hacking-Notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- list of sql-injection and XSS strings☆113Dec 14, 2015Updated 10 years ago
- Collection of scripts that aid in penetration testing of JSON Web Tokens☆58Feb 2, 2019Updated 7 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆32Jan 22, 2018Updated 8 years ago
- Hunting Bugs for Fun and Profit☆272Jul 29, 2020Updated 6 years ago
- security related events, tools, tutorials, cheatsheets, and more.☆10Oct 20, 2015Updated 11 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- TokyoWesterns CTF 4th 2018 shrine☆12Aug 23, 2019Updated 7 years ago
- Security conferences talks☆25Jul 10, 2020Updated 6 years ago
- Virtual host wordlist☆54Jan 12, 2021Updated 5 years ago
- Learning Penetration Testing of Android Applications☆81Aug 5, 2017Updated 9 years ago
- A List Of Labs For People (Students) Who Want Learn OR Practice IT Security / Hacking / Penetration Testing In Ethical Way.☆91Nov 25, 2020Updated 5 years ago
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆21Apr 28, 2019Updated 7 years ago
- Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.☆473Nov 10, 2022Updated 3 years ago
- ☆11May 15, 2020Updated 6 years ago
- The aim of the project is to develop intentionally vulnerable source code in various languages.☆16Mar 3, 2026Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Takes ip range, Scan all open SSL Certs, Grab Cnames☆110Sep 23, 2018Updated 8 years ago
- Uses Go net/http library to distinguish alive hosts from a give list of hosts/urls☆12Dec 23, 2019Updated 6 years ago
- ☆10Jun 11, 2018Updated 8 years ago
- ☆27Feb 16, 2021Updated 5 years ago
- A lightweight HTTP Server that exploits XSS victim's session automatically☆11Mar 12, 2014Updated 12 years ago
- API research and learning☆12May 22, 2019Updated 7 years ago
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 8 years ago
- Notes as I learn basic AWS penetration testing☆67May 28, 2019Updated 7 years ago
- Windows 10 Exploit☆30Oct 29, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This Repo for python exercises that are taken in the Lab.☆86Jul 5, 2026Updated 4 months ago
- Yahoo subdomains for bug bounty☆23Mar 22, 2019Updated 7 years ago
- CTF Writeups☆12Feb 25, 2023Updated 3 years ago
- Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.☆440Aug 29, 2026Updated 2 months ago
- A collection of useful scripts for penetration testers☆83Oct 23, 2012Updated 14 years ago
- An entry level resource to learning bug bounty.☆28Apr 11, 2018Updated 8 years ago
- My IDA scripts, tips and testing techniques for Thick Client applications.☆17Jun 19, 2014Updated 12 years ago
- macOS/OSX hash dump script taken from Empire framework☆14Oct 19, 2018Updated 8 years ago
- Regular expression Search on the command-line☆16Mar 31, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆38Nov 8, 2017Updated 8 years ago
- windows tiny reverse shell☆29Mar 21, 2022Updated 4 years ago
- 2018大学生信息安全国赛pwn出题docker☆26Jun 23, 2018Updated 8 years ago
- Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests☆21May 1, 2017Updated 9 years ago
- Extracting URLs of a specific target based on the results of "commoncrawl.org"☆278Dec 4, 2025Updated 11 months ago
- Hacking Wordlist collections for password cracking are attached in the below files☆16Apr 5, 2018Updated 8 years ago
- Offsec Pentest and Bug Bounty Notes☆24May 28, 2020Updated 6 years ago