A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Top disclosed reports from HackerOne

A GitHub Security Lab initiative, providing an in-repo learning experience, where learners secure intentionally vulnerable code.

Differential fuzzing REPL for HTTP implementations.

Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty

Python for AWAE (Advanced Web Attacks and Exploitation)