Example Cross Site Request Forgery (CSRF) vulnerabilities in action.
☆19Feb 20, 2017Updated 9 years ago
Alternatives and similar repositories for csrf-examples
Users that are interested in csrf-examples are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SLSA level 3 action☆12Apr 26, 2024Updated 2 years ago
- ☆15Mar 8, 2026Updated 5 months ago
- Hackable website for teaching/training purposes. Includes my undergraduate thesis.☆14Mar 7, 2018Updated 8 years ago
- Find unicode codepoints to use in normalisation and transformation attacks.☆11Mar 15, 2021Updated 5 years ago
- Centralised event loop spinning☆22Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Code for Java and C++ youtube tutorials in channel: https://www.youtube.com/c/ZulkarnineMahmud.☆11Apr 18, 2022Updated 4 years ago
- https://hack.af/holidays☆16Jan 3, 2022Updated 4 years ago
- A Python tool to manage GitHub Organizations and perform backup☆22Mar 26, 2026Updated 5 months ago
- Extract the best title value from within HTML head elements.☆17Apr 17, 2023Updated 3 years ago
- A playground to practice SSRF Attacks against web apps☆17Oct 15, 2018Updated 7 years ago
- List of learning resources, learning platforms, and tools useful for CTF and cybersecurity in general☆20Jan 19, 2022Updated 4 years ago
- Deployment code for ashirt-server☆20Jun 27, 2026Updated 2 months ago
- A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.☆33Oct 13, 2024Updated last year
- Bug-Bounty Resources and Articles☆13Sep 16, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- WikiLeaks Vault 7 CIA Hacking Tools☆16Sep 9, 2017Updated 8 years ago
- Challenges of the final round of the Inter University CTF Competition by BUET CSE Fest 2023☆13Jul 23, 2023Updated 3 years ago
- Find Cve Exploits/POC from github☆17Jul 6, 2021Updated 5 years ago
- A list of resources for those interested in getting started in bug bounties☆15Jan 15, 2019Updated 7 years ago
- Exfiltrating "google account password" and "android cookies" made easy with evil browser. Checkout YouTube : https://youtu.be/pvuT0m4QUbU☆14May 11, 2023Updated 3 years ago
- Toggle Burp proxy from anywhere and get its status in i3wm☆23Sep 2, 2024Updated 2 years ago
- Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.☆17Aug 23, 2024Updated 2 years ago
- All about subdomain enumeration☆16Feb 5, 2019Updated 7 years ago
- ☆40Aug 2, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆23Mar 29, 2022Updated 4 years ago
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆40Sep 25, 2024Updated last year
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- This script will find some basic vulns. I made this script for my daily hunting. The best feature about this script is just run it in bac…☆20Feb 19, 2024Updated 2 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆17Jan 31, 2021Updated 5 years ago
- Creates date-based wordlists that can be used for penetration testing, QA fixtures, or any workflow that needs exhaustive date coverage.☆16Mar 25, 2026Updated 5 months ago
- Semgrep-based Policy Controller for Kubernetes☆47Apr 4, 2025Updated last year
- A definitely (read: not) secure online banking site. Built for demo purposes as an example of common security vulnerabilities / what NOT …☆25Feb 13, 2026Updated 6 months ago
- ☆43Dec 13, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Tiny library to parse the subdomain, domain, and tld extension from a host string☆23Apr 1, 2022Updated 4 years ago
- A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes☆43Nov 28, 2025Updated 9 months ago
- A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.☆17Feb 15, 2020Updated 6 years ago
- This small repo contain OSCP public resources. You can download this on your Google Chrome with the following steps.☆19Dec 31, 2020Updated 5 years ago
- CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE☆31Mar 13, 2019Updated 7 years ago
- Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3☆27Aug 18, 2024Updated 2 years ago
- This python based tool can be used to discover API keys, access tokens, and other sensitive data in JavaScript files. It can scan JavaScr…☆16Oct 18, 2024Updated last year