Resources
wstg
OWASP/wstg
The OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
Topics
Related projects
CheatSheetSeries34kThe official OWASP Cheat Sheet Series, a concise collection of high-value application security guidance and best practices organized by topic.
Active-Directory-Exploitation-Cheat-Sheet6.8kA curated cheat sheet of common Windows Active Directory enumeration, privilege-escalation, lateral-movement, and persistence techniques with commands.
wordlists1.8kA regularly updated collection of real-world infosec wordlists covering CMS paths, robots.txt entries and subdomains for use in security testing.
dirsearch15.1kdirsearch is an advanced web path brute-forcer that enumerates directories and files using wordlists. It supports recursion, filtering, proxies, resumable sessions and a Python API, making it a common tool for penetration testers performing web reconnaissance.
juice-shop14.4kOWASP Juice Shop is a deliberately insecure web application covering the OWASP Top 10 and many real-world flaws. It serves as a training target for security awareness, CTF events and tool testing, and can be run locally via npm, Docker or packaged distributions.
WhatWeb7kWhatWeb is a next-generation web scanner that fingerprints websites, identifying CMSs, frameworks, servers, and version details using more than 1,800 plugins.