A checklist of important security issues you should consider when creating a web application.
☆424May 10, 2021Updated 5 years ago
Alternatives and similar repositories for WebDeveloperSecurityChecklist
Users that are interested in WebDeveloperSecurityChecklist are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆85Oct 15, 2022Updated 3 years ago
- Nashorn Post Exploitation☆31Feb 12, 2018Updated 8 years ago
- Windows Privesc Check☆20May 20, 2014Updated 12 years ago
- Checklist intended to be used as a baseline for assessing, designing, and testing the security of a MAM (Application Wrapping) solution☆20Sep 2, 2015Updated 11 years ago
- Spray SMB with hashes, Then psexec☆32Jul 3, 2019Updated 7 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Upgrade your netcat shell today!☆58Jul 11, 2017Updated 9 years ago
- Vulnerable Windows Driver with exploits which were used for demonstration purposes on Hunting and exploiting bugs in kernel drivers prese…☆13Jan 29, 2013Updated 13 years ago
- A cheat sheet for pentesters and researchers about vulnerabilities in well-known monitoring systems.☆166Jun 10, 2021Updated 5 years ago
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 8 years ago
- Docker Automated Build for Security Testing Tools☆14Apr 8, 2022Updated 4 years ago
- Evil snippets of Underhanded Red Team tactics☆11Jul 5, 2017Updated 9 years ago
- Damn Vulnerable Node Application☆20Dec 22, 2015Updated 10 years ago
- Fingerprint a web app using local files as the fingerprint sources☆39May 16, 2017Updated 9 years ago
- This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. …☆42Mar 14, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Distributed password cracker for operating over high latency networks of loosely coupled hosts.☆13Jul 30, 2013Updated 13 years ago
- ☆26Jul 18, 2017Updated 9 years ago
- Reverse or bind shell catcher which uprgrades the caught shell to be more like a regular shell☆26Mar 17, 2019Updated 7 years ago
- The great TCP Gender Changer (tgcd) tool compiled for Windows☆14Apr 18, 2016Updated 10 years ago
- A lab for playing with NoSQL Injection☆138Feb 23, 2026Updated 7 months ago
- Pentest Lab on OpenStack with Heat, Chef provisioning and Docker☆383Nov 2, 2017Updated 8 years ago
- All checklists☆27Mar 26, 2019Updated 7 years ago
- Checklist of the most important security countermeasures when designing, testing, and releasing your API☆23,330Jul 21, 2026Updated 2 months ago
- RFD Checker - security CLI tool to test Reflected File Download issues☆62Feb 26, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Microsoft Office / COM Object DLL Planting☆15May 14, 2016Updated 10 years ago
- Next Generation Phishing Tool For Internal / Red Teams☆37Jun 4, 2019Updated 7 years ago
- AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.☆257Feb 23, 2022Updated 4 years ago
- Python script to check GitHub accounts for world-editable wiki pages☆21May 8, 2023Updated 3 years ago
- Terraform configuration to build a Burp Private Collaborator Server☆25Nov 7, 2017Updated 8 years ago
- A horizontal and vertical web content enumerator☆53Apr 7, 2026Updated 6 months ago
- Checklist of the most important security countermeasures when designing, creating, testing your web/mobile application☆663Apr 10, 2020Updated 6 years ago
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆501Aug 7, 2020Updated 6 years ago
- Nameserver DNS poisoning attacks made easy☆527Feb 26, 2017Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Web Application Firewall For Limited Exploitation☆17Nov 15, 2017Updated 8 years ago
- Exploitation for XSS☆737Aug 5, 2021Updated 5 years ago
- AV Bypass☆29Jan 12, 2018Updated 8 years ago
- Image size issues plugin for Burp Suite☆95Jun 27, 2018Updated 8 years ago
- If you're launching a new application and have security in mind, this is a good starting point☆105Mar 30, 2016Updated 10 years ago
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- Framework for Testing WAFs (FTW!)☆263May 22, 2023Updated 3 years ago