The Offensive Manual Web Application Penetration Testing Framework.
updated at May 11, 2024, 7:51 a.m.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
updated at May 11, 2024, 7:53 a.m.
Checklist of security precautions for Ruby on Rails applications.
updated at May 11, 2024, 9:19 a.m.
Analyze the security of any domain by finding all the information possible. Made in python.
updated at May 11, 2024, 11:39 a.m.
Automated All-in-One OS Command Injection Exploitation Tool.
updated at May 11, 2024, 11:48 a.m.
Rip web accessible (distributed) version control systems: SVN/GIT/HG...
updated at May 11, 2024, 1:41 p.m.
A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
updated at May 11, 2024, 3:49 p.m.
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
updated at May 11, 2024, 3:59 p.m.
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
updated at May 11, 2024, 4:07 p.m.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
updated at May 11, 2024, 4:07 p.m.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
updated at May 11, 2024, 6:15 p.m.
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
updated at May 11, 2024, 9:33 p.m.
Automatic SQL injection and database takeover tool
updated at May 11, 2024, 9:34 p.m.
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
updated at May 11, 2024, 9:34 p.m.