Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
awesome-web-hacking
A list of web application security
https://github.com/infoslack/awesome-web-hacking
- Web Application Exploitation @ Rawsec Inventory - Complete list of Web pentesting tools
- Cyclops is a novel browser that can detect vulnerability automatically - Cyclops is a web browser with XSS detection feature
- https://columbus.elmasy.com/ - Columbus Project is an advanced subdomain discovery service with fast, powerful and easy to use API.
- BadUSB Script To Exfiltrate Passwords - Extracts all saved passwords from Chrome, Firefox, and Edge to be saved onto secondary USB for further analysis.
- official Kali Linux
- official BlackArch Linux
- official OWASP ZAP
- official WPScan
- docker-metasploit
- Damn Vulnerable Web Application (DVWA)
- OWASP Juice Shop
- Vulnerable WordPress Installation
- Vulnerability as a service: Shellshock
- Vulnerability as a service: Heartbleed
- Security Ninjas
- Arch Linux Penetration Tester
- Docker Bench for Security
- OWASP Security Shepherd
- OWASP WebGoat Project docker image
- OWASP WrongSecrets Project docker image
- OWASP Mutillidae II Web Pen-Test Practice Application
- Docker for pentest
- The Modern Port Scanner
- Hackerone
- DarkRelay Security Labs
Programming Languages