A NoSQL Injectable Node App
☆42Jun 8, 2021Updated 5 years ago
Alternatives and similar repositories for vulnerable-node-app
Users that are interested in vulnerable-node-app are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LDAP Injection Vulnerability Application(Blog Sample Code)☆21Jun 9, 2026Updated 3 months ago
- Labs built in docker to cover NSE lessons☆12Nov 24, 2023Updated 2 years ago
- A ZAPROXY Add-on that allows testing of web application vulnerabilities by recording complex multi-step sequences. You can test applica…☆23May 14, 2025Updated last year
- A simple web app with a XXE vulnerability.☆229Nov 10, 2021Updated 4 years ago
- a ZAPROXY Addon ActiveScan for detecting SQL injection with more better way.☆19Jun 7, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Collection of over 9000 xss payloads | heavy xss collection☆12Dec 6, 2022Updated 3 years ago
- 漏洞复现记录☆11Jun 18, 2019Updated 7 years ago
- Scripts to automate RECON process☆12Aug 31, 2025Updated last year
- This tool is used to find the admin login page of a website.☆16Jan 15, 2021Updated 5 years ago
- medium interaction postgresql honeypot☆13Aug 6, 2024Updated 2 years ago
- A framework for linking the DOM and DOM based events with scripting languages compiled to WASM. Part of the PyScript project.☆10Oct 1, 2024Updated last year
- ☆91Sep 2, 2026Updated 3 weeks ago
- Intentionally Vulnerable Flask app for use in Demos☆34Feb 7, 2026Updated 7 months ago
- Load the evilDLL from socket connection without touch disk☆15Aug 27, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CSS Keylogger Proof of Concept☆15Feb 21, 2018Updated 8 years ago
- SQL injection via unsanitized QuerySet.order_by() input☆13Jul 10, 2021Updated 5 years ago
- Okadminfinder rewrite by Xnuvers007☆16Apr 13, 2021Updated 5 years ago
- A Burp Suite Extender that recognize CAPTCHA and use for intruder payload☆18Dec 28, 2017Updated 8 years ago
- Fast subdomains enumeration tool for penetration testers☆32Feb 6, 2023Updated 3 years ago
- ✅ CTF participation Telegram Bot☆14Aug 5, 2022Updated 4 years ago
- A simple Node.js Express REST app with some OWASP vulnerabilities.☆28May 14, 2026Updated 4 months ago
- The (WordPress) website test script can be exploited for Unlimited File Upload via CVE-2020-35489☆32Mar 26, 2024Updated 2 years ago
- CLI tool that extracts a regex pattern from a list of urls ( Rust )☆62Sep 14, 2022Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- javaspringvulny - a Spring Boot web application built wrong on purpose☆25Aug 14, 2026Updated last month
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 4 years ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 10 months ago
- Burp extension to automatically drop requests that match a certain regex.☆10Mar 10, 2023Updated 3 years ago
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆47Feb 16, 2024Updated 2 years ago
- Impacket pre-compiled binaries☆20Jul 31, 2023Updated 3 years ago
- ☆38Sep 29, 2020Updated 5 years ago
- Ruby ARP Toolkit☆14Apr 15, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.☆415Oct 31, 2021Updated 4 years ago
- A modified version of TomNomNom's anew, allowing for multiple files to be defined as parameters.☆13Jun 17, 2023Updated 3 years ago
- A laboratory for learning secure web and mobile development in a practical manner.☆980Sep 25, 2024Updated last year
- Java bindings for Google cpu_features☆11Jun 20, 2024Updated 2 years ago
- P2P Communications of Named Pipes☆12Jul 30, 2026Updated last month
- Reverse IP And Subdomain Scanner☆21May 16, 2021Updated 5 years ago
- String or worldlist encoder for use in fuzzing or web application testing☆19Sep 2, 2019Updated 7 years ago