SoheilKhodayari / Basta-COSILinks
A framework for the detection of COSI vulnerabilities / XS-Leaks
☆14Updated 2 years ago
Alternatives and similar repositories for Basta-COSI
Users that are interested in Basta-COSI are comparing it to the libraries listed below
Sorting:
- TheThing: an open-source tool to detect DOM Clobbering vulnerabilities☆55Updated 2 years ago
- Searcher for cross-site leaks (XS-Leaks)☆82Updated 3 years ago
- XS-Leak Browser Test Suite☆86Updated 2 years ago
- Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes☆32Updated 3 years ago
- Client-Side Prototype Pollution Tools☆85Updated 4 years ago
- List of Trusted Types bypasses☆102Updated last year
- MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts☆82Updated 2 years ago
- The commands and scripts I used in the Live Recon Village talks☆37Updated 4 years ago
- Resources for Browser Security Research☆52Updated 3 years ago
- TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.☆85Updated 4 months ago
- JAW: A Graph-based Security Analysis Framework for Client-side JavaScript☆118Updated 4 months ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆35Updated 10 months ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Updated 5 years ago
- WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropr…☆50Updated last year
- CVE PoCs☆21Updated 5 years ago
- Prototype Pollution exploits collection☆37Updated 4 years ago
- File system enumerator and monitor for Android and Ubuntu.☆17Updated 4 years ago
- Script to test open Akamai ARL vulnerability.☆70Updated 4 years ago
- Labs from our workshop "Demystifying the server-side".☆17Updated 3 years ago
- Service-Now Article Bruteforcer☆16Updated 5 years ago
- ☆170Updated 4 years ago
- ☆27Updated 3 years ago
- DOM Clobbering Wiki, Browser Testing, and Payload Generation☆60Updated last month
- ☆56Updated last year
- A repository of some useful grep patterns for tomnomnoms gf tool☆38Updated 5 years ago
- vīlicus is a bug bounty api dashboard☆41Updated 2 years ago
- Manager of 14 third-party sources comprising approximately 4,000 Semgrep rules 🗂☆97Updated 3 weeks ago
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Updated 2 months ago
- CircleCI log and security configuration automations☆22Updated 5 years ago
- Performing automated scan using Burp Suite Pro & Vmware Burp Rest API☆52Updated 3 years ago