A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

A database migrations tool for SQLAlchemy.

A familiar HTTP Service Framework for Python.

A task runner that works well with poetry or uv.

🍪 Flask Session Cookie Decoder/Encoder

Python cross-version bytecode library and disassembler

Cheat sheet for xonsh shell with copy-pastable examples. The best doc for the new users.

Implementing Kerberoast attack fully in python

Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX or any other license id scheme.

PyPI malware packages