A list of useful payloads and bypass for Web Application Security and Pentest/CTF
-
Updated
Jul 21, 2020 - Python
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.
A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI
Automated pentest framework for offensive security experts
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Collaborative Penetration Test and Vulnerability Management Platform
Advanced vulnerability scanning with Nmap NSE
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本,最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start
Reverse Shell as a Service
Automatic SSRF fuzzer and exploitation tool
Penetration tests guide based on OWASP including test cases, resources and examples.
Create actionable data from your Vulnerability Scans
Penetration Testing Platform
Vulnerability Labs for security analysis
SQL Vulnerability Scanner
vulnx
The Correlated CVE Vulnerability And Threat Intelligence Database API
Open Vulnerability Assessment Scanner - Scanner for Greenbone Vulnerability Management (GVM)
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
Steal Net-NTLM Hash using Bad-PDF
ES File Explorer Open Port Vulnerability - CVE-2019-6447
A DNS rebinding attack framework.
OPCDE Cybersecurity Conference Materials
Add a description, image, and links to the vulnerability topic page so that developers can more easily learn about it.
To associate your repository with the vulnerability topic, visit your repo's landing page and select "manage topics."