Keycloak 26.8.1 High 7.4 Remote SAML broker leftover. A person with no Keycloak account can finish login as someone else by splitting the signed HTTP-Redirect query. Needs a redirect-signing IdP with validateSignature on and wantAssertionsSigned off. Loopback PoC.
☆12Nov 9, 2026Updated this week
Alternatives and similar repositories for keycloak-saml-redirect-param-split
Users that are interested in keycloak-saml-redirect-param-split are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Blind XSS SVG☆10Updated this week
- ☆21Oct 21, 2026Updated 3 weeks ago
- AIHTTPAnalyzer revolutionizes web application security testing by bringing artificial intelligence capabilities to Burp Suite. This innov…☆75Mar 2, 2025Updated last year
- Public OCI-Image (docker image) Security Checker☆22Feb 16, 2026Updated 8 months ago
- ☆24Apr 17, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Passively check for XSS character encodings☆19Mar 9, 2026Updated 8 months ago
- A full fledged self-hosted version of the CFP (Call for Papers) management platform used by CFP Directory with optional federation to the…☆13Feb 14, 2026Updated 8 months ago
- AWS S3 Bucket Finder.☆14Oct 28, 2025Updated last year
- ☆13Feb 12, 2026Updated 8 months ago
- CVE-2026-18963☆20Aug 25, 2026Updated 2 months ago
- mitigation of cve-2026-31431 using ftrace☆12May 12, 2026Updated 5 months ago
- ☆12Dec 30, 2024Updated last year
- Command line interface for Jsmon Security Platform☆33Jul 31, 2026Updated 3 months ago
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- gRPC / gRPC-Web Pentest Practicing Lab☆10Aug 29, 2023Updated 3 years ago
- Get Artist Concerts History from setlist.fm website☆13Jun 25, 2022Updated 4 years ago
- Reproducible Docker deployment for Qwen3.8-27B NVFP4 on NVIDIA DGX Spark (GB10, SM121) via OpenAI-compatible vLLM. Known-good baseline + …☆12Aug 14, 2026Updated 2 months ago
- You should patch, but not worry about CVE-2026-98432☆18Oct 30, 2026Updated last week
- ☆11Apr 23, 2026Updated 6 months ago
- ☆10Dec 22, 2023Updated 2 years ago
- A collection of one off hacks and simple scripts☆26Mar 21, 2023Updated 3 years ago
- Automated Malware Behavior Analysis Tool☆12May 13, 2026Updated 5 months ago
- ☆54Oct 1, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Client-side JS analyzer for discovering server HTTP endpoints☆14Mar 15, 2026Updated 7 months ago
- Analyze an APK archive.☆27Feb 24, 2024Updated 2 years ago
- CRLF Detection based on @BlackFan 's work See link below☆17Mar 14, 2024Updated 2 years ago
- ☆17Aug 16, 2026Updated 2 months ago
- FourOhMe is a tool for testing HTTP headers on a website in order to try to bypass 40* HTTP codes. Written in Go, so easy to install and …☆24Feb 5, 2024Updated 2 years ago
- SOAPI - The OpenAPI Documentation Scanner☆41Feb 17, 2025Updated last year
- Stackable, modular, 3D-printable rack for the NVIDIA DGX Spark. ABS/ASA, panels, CC BY-NC-SA 4.0.☆18Oct 8, 2026Updated last month
- This repository contains regular expressions for WhiteBox testing of web applications written in various programming languages: C Sharp, …☆13Feb 10, 2026Updated 9 months ago
- This repository contains wordlists for brute-forcing paths/files for web pentesting.☆15Jun 16, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆94Mar 26, 2026Updated 7 months ago
- Arp Spoof and inject beef hook in seconds☆13Feb 2, 2014Updated 12 years ago
- node.js Connect middleware to facilitate triggering server-side actions during end-to-end testing☆10Feb 26, 2014Updated 12 years ago
- Exploit for CVE-2026-33725 - Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import☆25Apr 23, 2026Updated 6 months ago
- xrecon is a powerful web fingerprinting tool with CDN detection capabilities☆44Aug 14, 2024Updated 2 years ago
- ☆15Nov 11, 2021Updated 5 years ago
- ProTracker 4.1 for Amiga - 8 channels, RTG graphics card screen/window, AHI sound cards, 68000 to 68060, Kickstart 2.04 up to AmigaOS 3.2…☆30Nov 3, 2026Updated last week
Are these results useful?