xdkp Goto Github PK

almanacs

Search through the recipes

awae-oswe-prep

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

conferences

Conference slides

docs

The open-source repo for docs.github.com

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

ewptx-preparation

exploit-writing-for-oswe

Tips on how to write exploit scripts (faster!)

frida-ios-dump

pull decrypted ipa from jailbreak device

hardwareallthethings

Hardware/IOT Pentesting Wiki

hash_extender

internalallthethings

Active Directory and Internal Pentest Cheatsheets

ios-app-signer

This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.

javulna

A deliberately vulnerable java app for educational purposes

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

marshalsec

mod_security-xss-bypass

mutillidae

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

oswe

Preparation for OSWE

oswe-labs-poc

Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

prototype-pollution-nsec18

Content released at NorthSec 2018 for my talk on prototype pollution

serialization-examples

telegram-web-app-bot-example

Telegram Web App for Bot Example. All WebApp-related questions you can ask in Discussions

tricks-web-penetration-tester

Web Application Penetration Testing

writing_safer_c_code

Collection of articles on good practices and tools to improve C code quality

xdkp

Config files for my GitHub profile.