Web Security
375 items from qazbnm456/awesome-web-security ★13,892
-
Whonow DNS Server github.com
-
Practical introduction to SSL/TLS github.com
-
A2SV github.com
-
bXSS github.com
-
JShell github.com
-
DNS Rebind Toolkit github.com
-
dref github.com
-
malware-jail github.com
-
nano github.com
-
Webshell-Sniper github.com
-
DVCS-Pillage github.com
-
-
Charles charlesproxy.com
HTTP proxy/monitor to view HTTP and HTTPS traffic.
-
htb-writeups github.com
-
JoomlaScan github.com
-
Reverse-Shell-Manager github.com
-
cefdebug github.com
-
GSDF github.com
-
ARS3NAL github.com
-
ntlm_challenger github.com
-
IPObfuscator github.com
-
pwngitmanager github.com
-
VWGen github.com
-
EyeWitness github.com
-
BadLibrary github.com
-
XSS.png github.com
-
Exploit database exploit-db.com
An ultimate archive of exploits and vulnerable software
-
Have I been Pwned? haveibeenpwned.com
Data breach index.
-
-
GuardRails github.com
GitHub app that provides security feedback in pull requests.
-
OopsSec Store github.com
-
espi0n/Dockerfiles github.com
-
charsetinspect github.com
-
Trust Scan github.com
URL security scanner with WHOIS, SSL, threat intelligence (URLhaus, PhishTank, Spamhaus), and 40+ scam/phishing pattern detection. Includes optional AI analysis via Ollama. (Demo)
-
Marshall Extensions github.com
-
wayparam github.com
-
Portswigger Web Security Academy portswigger.net
PortSwigger - A set of materials and labs to learn and exploit common web vulnerabilities.
-
Hudson Rock hudsonrock.com
A Free cybercrime intelligence toolset that can indicate if a specific APK package was compromised in an Infostealer malware attack.
-
repo-supervisor github.com
Auth0 - Secrets scanning tool that can run as a CLI, as a Docker container or in AWS Lambda.
-
Security Weekly securityweekly.com
Excellent podcast covering all ranges of security, with some episodes focusing portions on vehicle security from cars to drones.
-
CFR benf.org
Java decompiler
-
urlscan.io urlscan.io
-
Shodan shodan.io
A web-crawling search engine that lets users search for various types of servers connected to the internet.
-
CTF Field Guide trailofbits.github.io
Field Guide by Trails of Bits.
-
BurpSuite portswigger.net
A graphical tool to testing website security.
-
Hacker101 hacker101.com
CTF from HackerOne
-
Grokking Web Application Security manning.com
A book about building web apps that are ready for and resilient to any attack.
-
XSS game xss-game.appspot.com
A game about tricking people into running code in their browsers.
-
tl;dr sec tldrsec.com
-
Security Data Science Papers covert.io
- next page of items loading…