rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

AzureGoat

AzureGoat : A Damn Vulnerable Azure Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure...

Audio-Video-Communications-Top-10

This repository does not have a README...

adapt

Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...

vuln-bank-mobile

💳 Vulnerable Bank 모바일 앱 Vulnerable Bank 는 보안 엔지니어, 침투 테스터, 모바일 앱 보안 학습자를 위해 제작된 의도적으로 취약한 모바일 애플리케이션으로, 안전하지 않은 코딩 관행의 실제 공격을 연습하고 시연할 수 있도록 설계되었습니다. 이 모바일 앱은 일반적인 은행 기능을 갖춘 의도적으로 취약한 웹 API인 Vulnerable Bank API의 프론트엔드 역할을 합니다. 📥 즉시 다운로드 및 실행 권장 🆕 이제 컴파일된 .apk를 GitHub Releases에서 직접 다운로드할 수 있습니다. 📦...

DNSrecon-gui

My website: https://microjoan.com My blog: https://darkhacking.es/ Buy me a coffee: https://www.buymeacoffee.com/microjoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,...

thm-cybersec-portfolio

TryHackMe Notes — Cybersecurity Portfolio Personal notes and summaries of completed TryHackMe rooms. Built as a study reference and portfolio for IT security roles. Completed Rooms | Room| Topic ---|---|--- 01| Linux Privilege Escalation| Linux privesc techniques 02| Sudo Buffer Overflow|...

ARTLAS

ARTLAS Apache Real Time Logs Analyzer System Real time Apache log analyzer, based on top 10 OWASP vulnerabilities, identifies attempts of exploration in your web application, and notify you or your incident team on Telegram, Zabbix and Syslog/SIEM. ARTLAS uses the regular expression from the...

nysm

nysm A stealth post-exploitation container. Table of Content 1. Introduction 2. Installation 2.1 Requirements 2.2 Linux headers 2.3 Build 3. Usage 3.1 Examples 4. How it works 4.1 In general 4.2 Hide eBPF objects 4.3 Hide Auditd logs 4.4 Hide PIDs 4.5 Hide sockets 5. Limitations Introduction...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

dvna

Уязвимое приложение NodeJS DVNA Уязвимое приложение NodeJS DVNA — это простое приложение NodeJS для демонстрации 10 основных уязвимостей по OWASP и руководства по исправлению и предотвращению этих уязвимостей. Ветка fixes содержит исправления для уязвимостей. Исправления для уязвимостей OWASP Top...

metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

GCPGoat

GCPGoat : Una infraestructura GCP damnificada y vulnerable Comprometer la infraestructura en la nube de una organización es como sentarse sobre una mina de oro para los atacantes. Y a veces, una simple mala configuración o una vulnerabilidad en aplicaciones web es todo lo que un atacante necesita...

Docker-Security

Docker Security This is the OWASP Docker Top 10. It's a work in progress. About this document This document describes the most important 10 security bullet points for building a secure containerized environment. You can use it as a specification sheet if you start from scratch, alternatively...

NodeGoat

NodeGoat Node.js는 가볍고 빠르며 확장성이 뛰어나 웹 애플리케이션 개발에 널리 채택되고 있는 플랫폼입니다. 이 프로젝트는 Node.js로 개발된 웹 애플리케이션에 OWASP Top 10 보안 위험이 어떻게 적용되는지, 그리고 이를 효과적으로 해결하는 방법을 배울 수 있는 환경을 제공합니다. 시작하기 Node.js 웹 애플리케이션을 위한 OWASP Top 10: 알아보기! 이 애플리케이션에는 OWASP Top 10 취약점과 이를 해결하는 방법을 설명하는 튜토리얼 페이지가 포함되어 있습니다. 애플리케이션이 실행되면...

AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...

TOP

TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things Table of Contents 2026 year top total 30 2025 year top total 30 2024 year top total 30 2023 year top total 30 2022 year top total 30 2021 year top total 30 2020 year top total 30 2019 year top total 30 2018 year top...

CICD-Goat-Vapt-Writeup

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. Why this exists Most CI/CD security writeups either stay...

MobileApp-Pentest-Cheatsheet

Folha de Referência para Testes de Penetração em Aplicações Móveis A folha de referência de pentest de aplicativos móveis foi criada para fornecer uma coleção concisa de informações de alto valor sobre tópicos específicos de testes de penetração em aplicações móveis, bem como um checklist, mapead...

training-application-security

Treinamento Gratuito de Codificação Segura e Segurança de Aplicações — Exercícios SCORM de Código Aberto 40 exercícios gratuitos de codificação segura em código aberto que ensinam segurança de aplicações web da forma como os desenvolvedores aprendem — explorando vulnerabilidades reais como injeçã...