xdkp Goto Github PK

almanacs

Search through the recipes

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

conferences

Conference slides

docs

The open-source repo for docs.github.com

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

ewptx-preparation

frida-ios-dump

pull decrypted ipa from jailbreak device

hardwareallthethings

Hardware/IOT Pentesting Wiki

hash_extender

internalallthethings

Active Directory and Internal Pentest Cheatsheets

ios-app-signer

This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.

javulna

A deliberately vulnerable java app for educational purposes

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

marshalsec

mod_security-xss-bypass

mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

oswe

Preparation for OSWE

oswe-labs-poc

Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

prototype-pollution-nsec18

Content released at NorthSec 2018 for my talk on prototype pollution

serialization-examples

telegram-web-app-bot-example

Telegram Web App for Bot Example. All WebApp-related questions you can ask in Discussions

tricks-web-penetration-tester

Web Application Penetration Testing

writing_safer_c_code

Collection of articles on good practices and tools to improve C code quality

xdkp

Config files for my GitHub profile.

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.