Highlighted
Open highlighted repo slot
Put your repository first
Promote a GitHub repo at the top of Awesome repository list views for 7 days.
Awesome List
Awesome Web Security
🐶 A curated list of Web Security materials and resources.
qazbnm456/awesome-web-security
#awesome
#awesome-list
#list
#penetration-testing
#security
#web
#websecurity
- List stars
- 13,913
- README repos
- 129
- Indexed repos
- 122
- List commits
- 584
- Forks
- 1,884
- Open issues
- 20
Tracked list growth
GitHub stars and default-branch commits for qazbnm456/awesome-web-security.
Latest scan 2026-10-18 10:50
Likes history
GitHub starsCommits history
Default branch commits
Latest repo push 2026-10-18
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Stack
GitHub topics
- Updated
- 2026-08-27
- Lists
- 4 list mentions
- First commit
- 2016-10-18
- License
- MIT
- Issues
- Disabled
81,817
stars
- Forks
- 17,477
- Commits
- 2,202 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
smicallef/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
GitHub topics
- Updated
- 2026-04-13
- Lists
- 4 list mentions
- First commit
- 2012-04-28
- License
- MIT
- Issues
- 346 open
23,579
stars
- Forks
- 3,778
- Commits
- 3,742 commits
- Star growth, last 7 days
- +244 +1.0%
- Commit velocity, last 7 days
- 0 0.0%
juice-shop/juice-shop
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
AI dev
Stack
GitHub topics
- Updated
- 2026-10-17
- Lists
- 3 list mentions
- First commit
- 2014-09-19
- License
- MIT
- Issues
- 7 open
14,123
stars
- Forks
- 20,104
- Commits
- 23,577 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
rmusser01/Infosec_Reference
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Stack
- Updated
- 2025-10-20
- Lists
- 4 list mentions
- First commit
- 2014-09-12
- License
- MIT
- Issues
- 4 open
6,008
stars
- Forks
- 1,230
- Commits
- 541 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
x0rz/EQGRP
Decrypted content of eqgrp-auction-file.tar.xz
Stack
GitHub topics
- Updated
- 2017-05-24
- Lists
- 1 list mention
- First commit
- 2017-04-08
- License
- Unknown
- Issues
- 18 open
4,205
stars
- Forks
- 2,075
- Commits
- 33 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
evyatarmeged/Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
- Updated
- 2026-04-21
- Lists
- 2 list mentions
- First commit
- 2018-05-15
- License
- MIT
- Issues
- 14 open
4,055
stars
- Forks
- 502
- Commits
- 190 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
nil0x42/phpsploit
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
GitHub topics
- Updated
- 2024-05-06
- Lists
- 3 list mentions
- First commit
- 2012-07-08
- License
- GPL-3.0
- Issues
- 27 open
2,501
stars
- Forks
- 465
- Commits
- 1,021 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
momenbasel/keyFinder
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
Stack
GitHub topics
- Updated
- 2026-07-19
- Lists
- 2 list mentions
- First commit
- 2019-08-07
- License
- MIT
- Issues
- 5 open
725
stars
- Forks
- 128
- Commits
- 28 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
brannondorsey/whonow
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Stack
GitHub topics
- Updated
- 2021-12-17
- Lists
- 1 list mention
- First commit
- 2018-03-31
- License
- MIT
- Issues
- 9 open
658
stars
- Forks
- 90
- Commits
- 23 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
hahwul/a2sv
Auto Scanning to SSL Vulnerability
Archived
- Updated
- 2020-12-12
- Lists
- 1 list mention
- First commit
- 2016-02-02
- License
- MIT
- Issues
- 16 open
636
stars
- Forks
- 167
- Commits
- 140 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
brannondorsey/dns-rebind-toolkit
A front-end JavaScript toolkit for creating DNS rebinding attacks.
Stack
GitHub topics
- Updated
- 2021-10-02
- Lists
- 1 list mention
- First commit
- 2018-05-19
- License
- MIT
- Issues
- 3 open
- Forks
- 84
- Commits
- 18 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
ReversecLabs/dref
DNS Rebinding Exploitation Framework
Stack
GitHub topics
- Updated
- 2021-04-27
- Lists
- 1 list mention
- First commit
- 2018-06-23
- License
- Unknown
- Issues
- 2 open
494
stars
- Forks
- 70
- Commits
- 108 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%
momenbasel/htb-writeups
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
GitHub topics
- Updated
- 2026-07-18
- Lists
- 2 list mentions
- First commit
- 2026-04-10
- License
- MIT
- Issues
- 0 open
289
stars
- Forks
- 52
- Commits
- 28 commits
- Star growth, last 7 days
- 0 0.0%
- Commit velocity, last 7 days
- 0 0.0%