Repository Index

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

• pentest
• payload
• bypass
• web-application

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers

This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

• hacking
• penetration-testing
• hacking-series
• cybersecurity

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

• firewall
• http-flood
• security
• sql-injection

Source code for Hacker101.com - a free online web and mobile security class.

• education
• hacking
• security
• hackerone

A vulnerability scanner for container images and filesystems

• containers
• security
• vulnerability
• docker

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

• security
• vulnerability
• vulnerability-scanner
• passive-vulnerability-scanner

A list of web application security

• penetration-testing
• web-hacking
• vulnerabilities
• scanner

Potentially dangerous files

• list
• web
• vulnerability
• files

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

• appsec
• compliance
• devsecops
• devsecops-tools

A collection of JavaScript engine CVEs with PoCs

• javascript
• cve
• vulnerability

Reverse Shell as a Service

• reverse-shell
• exploit
• vulnerability
• pentesting

A DNS rebinding attack framework.

• dns-rebinding
• dns
• vulnerability
• attack

ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军

• artex
• ai-agent
• cybersecurity
• security

🔪Browser logic vulnerabilities :skull_and_crossbones:

• security
• browser
• xss
• vulnerability

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

• cve
• security
• security-alerts
• vulnerability

List of Magento extensions with known security issues.

• magento
• extensions
• vulnerability

Cyclops 是一款具有 XSS 检测功能的浏览器

• security
• xss
• taint-tracking
• vulnerability

Awesome Splunk SPL hunt queries that can be used to detect the latest vulnerability exploitation attempts & subsequent compromise

• detection
• splunk
• bpfdoor
• vulnerability

A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.

• security
• security-tools
• vulnerability
• honeypot

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

• security
• security-tools
• honeypot
• deception

MICROS Honeypot is a low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS). This is a directory traversal vulnerability.

• honeypot
• micros
• vulnerability
• security

Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.

• audit
• auditor
• cli
• devsecops