SoheilKhodayari / Basta-COSILinks
A framework for the detection of COSI vulnerabilities / XS-Leaks
☆14Updated 2 years ago
Alternatives and similar repositories for Basta-COSI
Users that are interested in Basta-COSI are comparing it to the libraries listed below
Sorting:
- Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes☆32Updated 2 years ago
- TheThing: an open-source tool to detect DOM Clobbering vulnerabilities☆54Updated 2 years ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Updated 5 years ago
- Client-Side Prototype Pollution Tools☆85Updated 4 years ago
- Searcher for cross-site leaks (XS-Leaks)☆82Updated 2 years ago
- MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts☆81Updated 2 years ago
- Labs from our workshop "Demystifying the server-side".☆17Updated 3 years ago
- XS-Leak Browser Test Suite☆86Updated last year
- TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.☆77Updated 3 months ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆33Updated 8 months ago
- Custom scripts for the PIPER Burp extensions.☆98Updated 2 years ago
- WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropr…☆50Updated last year
- The commands and scripts I used in the Live Recon Village talks☆39Updated 4 years ago
- Dependency Confusion Security Testing Tool☆51Updated 3 years ago
- CircleCI log and security configuration automations☆22Updated 5 years ago
- ☆16Updated 4 years ago
- Service-Now Article Bruteforcer☆16Updated 5 years ago
- Let's check if your target is vulnerable for client side prototype pollution.☆66Updated last year
- ☆95Updated 4 years ago
- Prototype Pollution exploits collection☆34Updated 4 years ago
- ☆73Updated 4 years ago
- ☆56Updated 10 months ago
- vīlicus is a bug bounty api dashboard☆41Updated 2 years ago
- Script to test open Akamai ARL vulnerability.☆71Updated 4 years ago
- CVE PoCs☆21Updated 5 years ago
- Collection of quirky behaviours of code and the CTF challenges that I made around them.☆27Updated 4 years ago
- File system enumerator and monitor for Android and Ubuntu.☆17Updated 4 years ago
- Manager of third-party sources of Semgrep rules 🗂☆90Updated last year
- ☆13Updated 5 years ago
- ☆19Updated 4 years ago