A intentionally vulnerable API and front end, written in Javascript. Adopt a crAPIbara today!
☆18Sep 20, 2026Updated last month
Alternatives and similar repositories for crAPIbara-Adoption-Agency
Users that are interested in crAPIbara-Adoption-Agency are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Extracting clear-text HTTP credentials from a POST request in a captured network stream using Wireshark filters and TCP stream analysis.☆11Dec 19, 2025Updated 10 months ago
- Malware Analysis · PowerShell Keylogger · Tor C2 — Concise walkthrough dissecting a SOCKS5-proxied keylogger, its keylogging APIs, exfilt…☆11Nov 26, 2025Updated 11 months ago
- UNION-based SQLi PoC where we enumerate tables, extract usernames and passwords from the users table using string concatenation, and log …☆11Nov 25, 2025Updated 11 months ago
- A deep dive into the OWASP Top 10: 2025 update — exploring how the focus shifts from fixing vulnerabilities to addressing design flaws, s…☆10Nov 8, 2025Updated 11 months ago
- Simple reflected XSS vulnerability where unencoded HTML context allows direct JavaScript execution via a <script> payload.☆11Nov 15, 2025Updated 11 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- AdityaBhatt3010 / SQL-injection-attack-querying-the-database-type-and-version-on-MySQL-and-MicrosoftA simple UNION-based SQL injection exploiting the category filter to enumerate column count and extract the backend database version usin…☆10Nov 15, 2025Updated 11 months ago
- Breaking down CVE-2025-54253 — an Adobe AEM-Forms exploit path from XXE to full remote code execution and its real-world impact.☆10Nov 4, 2025Updated 11 months ago
- AdityaBhatt3010 / SQL-injection-UNION-attack-determining-the-number-of-columns-returned-by-the-queryUNION-based SQLi to identify the exact number of columns returned by the application’s SQL query.☆10Nov 22, 2025Updated 11 months ago
- Blind SQL injection exploiting Welcome back responses to extract the administrator’s password using boolean conditions and substring-base…☆10Nov 15, 2025Updated 11 months ago
- DOM XSS in jQuery anchor href attribute sink using location.search source☆10Dec 12, 2025Updated 10 months ago
- CVE-2025-59287 — Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCook…☆10Oct 28, 2025Updated last year
- A clean Oracle-based UNION SQLi walkthrough where I enumerate tables, extract user credentials, and log in as administrator to solve the …☆10Nov 15, 2025Updated 11 months ago
- UNION-based SQL injection used to enumerate database tables, extract credential columns, dump usernames and passwords, and log in as the …☆10Nov 15, 2025Updated 11 months ago
- DOM-based XSS where location.search is written into the page via innerHTML, letting us inject HTML and trigger alert(1) using an SVG onlo…☆11Dec 4, 2025Updated 10 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- UNION-based SQLi to enumerate tables, dump usernames/passwords from the users table, and log in as the administrator.☆10Nov 17, 2025Updated 11 months ago
- Stored XSS occurs when malicious input is saved on the server and executed every time a user loads the affected page.☆10Nov 15, 2025Updated 11 months ago
- DOM-based XSS flaw where location.search is injected into the page via innerHTML, letting us execute arbitrary JavaScript.☆11Dec 12, 2025Updated 10 months ago
- A deep dive into two critical Sudo vulnerabilities (CVE‑2025‑32463 & CVE‑2025‑32462) that enable local privilege escalation across major …☆11Jul 21, 2025Updated last year
- Weaponizing LLM prompt injection to hijack user deletion logic — an offensive deep dive into excessive agency abuse.☆11Aug 1, 2025Updated last year
- Exploring the DNS misfire behind AWS’s October 2025 outage and what it taught us about resilience, dependency, and cloud fragility.☆11Oct 22, 2025Updated last year
- My Portfolio Site☆11Oct 5, 2025Updated last year
- A critical zero-auth RCE vulnerability in SharePoint (CVE-2025-53770), now exploited in the wild, building directly on the spoofing flaw …☆11Jul 22, 2025Updated last year
- Finding which column accepts string data using a UNION-based SQL injection on the product category filter to display the lab’s provided v…☆10Nov 15, 2025Updated 11 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- CORS misconfig + HTTP subdomain XSS analysis showing API key exfiltration, exploit breakdown and remediation.☆12Oct 8, 2025Updated last year
- Automate extraction of sensitive SECRET_KEY from a publicly exposed debug page (phpinfo.php) in a Burp Suite lab on information disclosur…☆12May 25, 2025Updated last year
- Python script for encoding and decoding secret messages in images using Least Significant Bit (LSB) steganography.☆12Apr 2, 2025Updated last year
- ☆12May 5, 2025Updated last year
- Wazuh is your all-seeing cybersecurity sentinel—an open-source SIEM powerhouse that hunts threats, enforces compliance, and defends every…☆12May 8, 2025Updated last year
- Exploited verbose error messages to leak Apache Struts version via type confusion, automating info disclosure reconnaissance for real-wor…☆12May 25, 2025Updated last year
- Exploiting NoSQL injection to extract admin credentials from a MongoDB-backed application using BurpSuite and Boolean-based payloads.☆12May 20, 2025Updated last year
- Exploited a NoSQL injection flaw to enumerate hidden fields and extract a valid password reset token, leading to a seamless account takeo…☆12May 22, 2025Updated last year
- Race Condition Vulnerability hands on experience to apply discount coupons multiple times and bypass intended pricing logic.☆12May 11, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- JWT Authentication Bypass via kid Path Traversal — Exploiting insecure key loading to impersonate the admin and delete users with a null …☆12May 23, 2025Updated last year
- JWT Authentication Bypass via Algorithm Confusion Exploit Without Key Disclosure☆12May 23, 2025Updated last year
- An inside look at how misconfigured Cloudflare Tunnels in DevOps environments silently open doors for cyber attackers.☆12Apr 29, 2025Updated last year
- Bypass login authentication using MongoDB NoSQL injection via logical and regex-based operator abuse to impersonate the admin user FOR ED…☆12May 18, 2025Updated last year
- JWT authentication bypass via jku header injection allows attackers to supply a malicious JWK URL and forge valid tokens, leading to priv…☆12May 22, 2025Updated last year
- By exploiting a leaked internal header via the TRACE method, I bypassed admin authentication and gained unauthorized access through infor…☆12May 25, 2025Updated last year
- Unleashing logic-flipping payloads in the neon-lit alleys of NoSQL - One Injection at a Time.☆12May 15, 2025Updated last year