Pinned Repositories
ctf-burp-macros
Some labs to help you learn about BURP Suite Macros.
ctf-cobra-kai
ctf-commandinjection
A small demo showing a command injection vulnerability and weak defenses.
ctf-websockets-example
A simple websockets app
frontend-chall-weather-app
CTF
secure-code-review-checklist
turbo-intruder-lab
xss-playground
A basic webapp to test XSS payloads.
AppSecExplained's Repositories
AppSecExplained/xss-playground
A basic webapp to test XSS payloads.
AppSecExplained/ctf-cobra-kai
AppSecExplained/frontend-chall-weather-app
CTF
AppSecExplained/turbo-intruder-lab
AppSecExplained/secure-code-review-checklist
AppSecExplained/ctf-commandinjection
A small demo showing a command injection vulnerability and weak defenses.
AppSecExplained/port-swigger-academy
scripts for solving the labs
AppSecExplained/canaryPorts
AppSecExplained/ctf-burp-macros
Some labs to help you learn about BURP Suite Macros.
AppSecExplained/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
AppSecExplained/OSCP-Exam-Report-Template
Modified template for the OSCP Exam and Labs. Used during my passing attempt
AppSecExplained/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
AppSecExplained/code_snippets
AppSecExplained/ctf-fuzzing-practice
AppSecExplained/security-champion-framework
AppSecExplained/security-champions-playbook
Security Champions Playbook v 2.1
AppSecExplained/whatTheShell
AppSecExplained/ctf-websockets-example
A simple websockets app
AppSecExplained/crAPI
completely ridiculous API (crAPI)
AppSecExplained/dvws-node
Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.
AppSecExplained/jaquen
Config files for my GitHub profile.
AppSecExplained/lpeworkshop
Windows / Linux Local Privilege Escalation Workshop
AppSecExplained/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
AppSecExplained/reference
AppSecExplained/simple-deep-assign
A very simple alternative of Object.assign() that recursively copies objects' elements to a target object. Recursion is only applied to a pure object. The other types of elements are just replaced with source elements.
AppSecExplained/vuln_mvc
AppSecExplained/webapp-comparison