SirAppSec / bsides-shadow-apiLinks
This repository hosts several snippets and file related to the BsidesLV 2024 talk about Shadow and Zombie APIs by me
☆18Updated last year
Alternatives and similar repositories for bsides-shadow-api
Users that are interested in bsides-shadow-api are comparing it to the libraries listed below
Sorting:
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆108Updated last year
- Simple PoC for demonstrating Race Conditions on Websockets☆55Updated last year
- Additional active scan checks for BURP☆28Updated 10 months ago
- Blogpost series showcasing interesting cloud - web app security bugs☆49Updated 2 years ago
- A collection of Turbo Intruder scripts.☆63Updated 6 months ago
- Verizon Burp Extensions: AI Suite☆137Updated 4 months ago
- Nuclei plugins to audit Chrome extensions☆65Updated last year
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆30Updated 7 months ago
- ☆82Updated 3 weeks ago
- FrogPost: postMessage Security Testing Tool☆95Updated 3 months ago
- A web security research tool for DOM testing☆21Updated last week
- ☆50Updated last year
- A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services …☆50Updated 2 years ago
- A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.☆24Updated 10 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆105Updated 6 months ago
- Prototype of Full Agentic Application Security Testing, FAAST = SAST + DAST + LLM agents☆63Updated 3 months ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆42Updated last year
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆32Updated 5 months ago
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…☆40Updated 3 years ago
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆20Updated 7 months ago
- Burp Suite extension for testing Passkey systems.☆73Updated 4 months ago
- LLM Testing Findings Templates☆72Updated last year
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆125Updated last year
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…☆163Updated last week
- ☆37Updated 3 weeks ago
- Enumerate AWS permissions and resources.☆70Updated 3 years ago
- GCP GOAT is the vulnerable application for learn the GCP Security☆64Updated 3 months ago
- An Incredibly Annoying, Insufferable Authentication Implementation☆31Updated last year
- ☆24Updated 2 years ago
- WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find ent…☆128Updated 3 years ago