A collection of hacking / penetration testing resources to make you better!
Updated Oct 7, 2018
A curated list of resources for learning about application security
OWASP Juice Shop is an intentionally insecure webapp for security trainings written entirely in Javascript which enco…
In-Depth DNS Enumeration and Network Mapping
Go
Updated Nov 14, 2018
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content …
Go
Updated Aug 19, 2018
Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more eff…
Automated Security Testing For REST API's
🐛 The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Groovy …
DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
Python
Updated Nov 18, 2018
Automated Penetration Testing Framework
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
Python
Updated Nov 8, 2018
OWASP ZSC - Shellcode/Obfuscate Code Generator
Python
Updated Apr 24, 2018
In-Depth DNS Enumeration and Network Mapping
Go
Updated Nov 19, 2018
OWASP Joomla Vulnerability Scanner Project
Perl 6
Updated Oct 21, 2018
Awesome Node.js Security resources
Updated Nov 5, 2018
OWASP WEB Directory Scanner
Python
Updated Jul 3, 2018
OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
Perl
Updated Sep 17, 2018
OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server…
PHP
Updated Jun 13, 2018
OWASP Web Application Security Testing Checklist
Updated Aug 20, 2018
Application Security Automation
Damn Vulnerable NodeJS Application
CSS
Updated Nov 14, 2018
Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows organizations to identify…
This repository contains payload to test NoSQL Injections
Updated Jun 22, 2017
Integrates Dependency-Check reports into SonarQube
Static code analyzer for .NET
C#
Updated Nov 19, 2018
CSRF Protector library: standalone library for CSRF mitigation
Owasp Orizon is a source code static analyzer tool designed to spot security issues in Java applications.
Java
Updated Mar 23, 2017
Capture-the-Flag (CTF) environment setup tools for OWASP Juice Shop
JavaScript
Updated Nov 13, 2018
SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabil…
Scala
Updated Nov 18, 2018
🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.
Updated Nov 10, 2018