Alternatives and similar repositories for Basta-COSI

Users that are interested in Basta-COSI are comparing it to the libraries listed below

• fransr / hot-jar-swapping-urlclassloader
  Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes
  ☆31Updated 2 years ago
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆82Updated 2 years ago
• shhnjk / cursed_types
  List of Trusted Types bypasses
  ☆101Updated last year
• rootxharsh / workshoplabs
  Labs from our workshop "Demystifying the server-side".
  ☆17Updated 3 years ago
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆83Updated last year
• SoheilKhodayari / TheThing
  TheThing: an open-source tool to detect DOM Clobbering vulnerabilities
  ☆51Updated last year
• BlackFan / cspp-tools
  Client-Side Prototype Pollution Tools
  ☆85Updated 3 years ago
• SoheilKhodayari / DOMClobbering
  DOM Clobbering Wiki, Browser Testing, and Payload Generation
  ☆55Updated 4 months ago
• LewisArdern / metasecjs
  MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
  ☆81Updated 2 years ago
• TROUBLE-1 / Type-juggling
  Lab that will help you to understand how type juggling vulnerability works.
  ☆22Updated 4 years ago
• dillonfranke / protoburp
  Encode and Fuzz Custom Protobuf Messages in Burp Suite
  ☆33Updated 6 months ago
• pry0cc / nahamcon-axiom-demo-2021
  The commands and scripts I used in the Live Recon Village talks
  ☆38Updated 4 years ago
• ndavison / circleci-logs
  CircleCI log and security configuration automations
  ☆22Updated 4 years ago
• caioluders / PII-Identifier
  Burp Extension to identify PII data
  ☆21Updated 4 years ago
• doyensec / confuser
  Dependency Confusion Security Testing Tool
  ☆49Updated 3 years ago
• BlackFan / CVE_PoCs
  CVE PoCs
  ☆21Updated 5 years ago
• B3nac / whatislife_enum
  File system enumerator and monitor for Android and Ubuntu.
  ☆17Updated 3 years ago
• melbadry9 / SSLEnum
  Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)
  ☆43Updated last week
• TheGrandPew / Sanity
  ☆16Updated 4 years ago
• justcatthefish / ctf-writeups
  CTF write-ups
  ☆97Updated 9 months ago
• detectify / Varnish-H2-Request-Smuggling
  ☆56Updated 4 years ago
• jackfromeast / TheHulk
  TheHulk is a dynamic analysis tool designed to detect and exploit DOM Clobbering vulnerabilities.
  ☆53Updated last week
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 3 years ago
• alalng / CVE-2022-44789
  ☆12Updated 2 years ago
• federicodotta / protobuf-decoder
  A simple Google Protobuf Decoder for Burp
  ☆43Updated 2 years ago
• Cache-Money / chronorace
  ☆72Updated 3 years ago
• w9w / bugbounty_changelogs
  ☆57Updated 7 months ago
• e11i0t4lders0n / SAML-SSO
  ☆18Updated 4 years ago
• shoebpate1 / Web-CTF-Challenges
  Collection of quirky behaviours of code and the CTF challenges that I made around them.
  ☆27Updated 4 years ago
• RandomRobbieBF / service-now
  Service-Now Article Bruteforcer
  ☆16Updated 5 years ago