Awesome Application Security

Personal list of interesting application security resources to get you started.

Table of Contents

• Bug Bounty Cheat Sheet
• Docker
• Awesome
• Tools
• Services
• Burp Extensions
• Reference

Bug Bounty Cheat Sheet

• Bug Bounty Platforms
• Books
• Special Tools
• Recon
• Practice Platforms
• XSS
• SQLI
• SSRF
• CRLF Injection || HTTP Response Splitting
• CSV Injection
• LFI
• XXE
• RCE
• Open Redirect
• Crypto
• Template Injection
• Content Injection
• XSLT Injection

Docker

• Docker Forensics Tools
• docker pull kalilinux/kali-linux-docker official Kali Linux
• docker pull wpscanteam/wpscan - official WPScan
• docker pull pandrew/metasploit - docker-metasploit
• docker pull citizenstig/dvwa - Damn Vulnerable Web Application (DVWA)
• docker pull opendns/security-ninjas - Security Ninjas
• docker pull diogomonica/docker-bench-security - Docker Bench for Security
• docker pull ismisepaul/securityshepherd - OWASP Security Shepherd
• docker pull danmx/docker-owasp-webgoat - OWASP WebGoat Project docker image

Awesome

• awesome-cve-poc
• awesome-threat-intel

Tools

• Parameth: Brute force Get and Post parameters
• Assetnote: Passive Alerting
• Repo Supervisor: Pull request for git secrets
• Flashbang
• Backup File Artifacts Checker

Services

• XSSHunter
• Censys
• Scans.io

Burp Extensions

• Reflector
• AWS Extender

Reference

• Payload All The Things

Contributors

• JonathanWalker
• Original Credit