This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities found by Portswigger Research team.
☆28Apr 30, 2025Updated last year
Alternatives and similar repositories for research-labs
Users that are interested in research-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CRLF Detection based on @BlackFan 's work See link below☆17Mar 14, 2024Updated 2 years ago
- Additional active scan checks for BURP☆29Oct 3, 2024Updated 2 years ago
- ☆16Nov 28, 2025Updated 11 months ago
- A tool to test cross-device authentication protocol security☆29Feb 24, 2025Updated last year
- ☆100Dec 4, 2025Updated 11 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Search Engine Dorks☆12Apr 2, 2024Updated 2 years ago
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage…☆133Sep 12, 2025Updated last year
- Hunt for Blind XSS, A revival of XSSHunter written in Golang, GoHunt brings all your favorite XSSHunter functionality. Plus quality of li…☆14Sep 13, 2025Updated last year
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆116Jun 23, 2025Updated last year
- ADFS Brute-Force Login Script☆11Mar 19, 2024Updated 2 years ago
- HTTP Desync research factory.☆125Aug 5, 2026Updated 3 months ago
- Reverse engineering project on stream☆13Mar 19, 2021Updated 5 years ago
- Legitimate bug bounty programs value ethical practices and provide clear rewards to researchers for identifying security flaws☆48Sep 22, 2024Updated 2 years ago
- Prototype Pollution Lab☆18Nov 20, 2020Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Burp Suite extension that detects, catalogs, and exports developer comments, secrets, and keywords embedded in both HTTP response bodie…☆19Sep 18, 2025Updated last year
- keep watching new bug bounty (vulnerability) postings.☆12Apr 7, 2024Updated 2 years ago
- Test domain expiration dates.☆12Dec 2, 2022Updated 3 years ago
- gRPC / gRPC-Web Pentest Practicing Lab☆10Aug 29, 2023Updated 3 years ago
- ☆48Sep 21, 2025Updated last year
- An Intro to Penetration Testing Workshop☆15May 31, 2018Updated 8 years ago
- Custom Trickest Workflows☆12Oct 26, 2023Updated 3 years ago
- GitHub Actions Cache Native Malware - for Educational and Research Purposes only.☆173May 8, 2026Updated 5 months ago
- This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me☆18Aug 5, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆10Jul 3, 2024Updated 2 years ago
- Monitor JS URLs for code diff and endpoints☆11Aug 29, 2025Updated last year
- A collection of tools for firebase realtime db vulnerability discovery☆12May 22, 2023Updated 3 years ago
- ☆18Jun 11, 2024Updated 2 years ago
- OpenEMR < 7.0.0 Arbitrary File Read☆10Feb 23, 2023Updated 3 years ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆163Mar 31, 2025Updated last year
- CSTI-Alert is a Node.js-based scanner that helps identify potential CSTI vulnerabilities in web applications.☆14Jul 21, 2025Updated last year
- Vulnerability scanner for Caido☆59Updated this week
- Every cybersecurity CTF challenge I've ever authored! o(^▽^)o☆13May 14, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆11Apr 8, 2024Updated 2 years ago
- ☆63Mar 1, 2023Updated 3 years ago
- PP-finder Help you find gadget for prototype pollution exploitation☆209May 15, 2026Updated 5 months ago
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆67Mar 2, 2026Updated 8 months ago
- Dump all available paths and/or endpoints on WADL file.☆97Nov 24, 2025Updated 11 months ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆14Jan 17, 2023Updated 3 years ago
- CTF-Writeups☆11Mar 3, 2021Updated 5 years ago