riramar/Web-Attack-Cheat-Sheet resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

4433 stars · 672 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A curated cheat sheet of tools, techniques, and resources for web application attacks, covering discovery, enumeration, scanning, and exploitation. It organizes links across categories like SQL injection, XSS, SSRF, subdomain takeover, and bug bounty reconnaissance.

Use cases

• find tools for web application penetration testing
• learn common web attack techniques like SQLi and XSS
• reconnaissance resources for bug bounty hunting
• find wordlists and tools for directory bruteforcing
• reference payloads for SSRF and XXE attacks
• discover subdomain enumeration and takeover tools

When to choose

• you need a quick reference of offensive web security tools and techniques
• you are preparing for bug bounty or pentest engagements
• you want a curated starting point for learning web attacks

When to avoid

• you need defensive security guidance or secure coding practices
• you want a runnable tool rather than a list of links
• you need a formal training course with structured lessons

Facets

learning-resource · maturity active

penetration-testing security osint vulnerability-scanning security penetration-testing web-development awesome-lists cli cross-platform cheat-sheet bug-bounty web-security offensive-security curated-list sqli xss ssrf web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="riramar/Web-Attack-Cheat-Sheet")