oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning
☆76Dec 5, 2024Updated last year
Alternatives and similar repositories for oauth-labs
Users that are interested in oauth-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Extract GraphQL operations from javascript☆25Mar 18, 2026Updated 5 months ago
- ☆16Dec 28, 2024Updated last year
- The Template Injection Playground allows to test a large number of the most relevant template engines for template injection possibilitie…☆68Apr 29, 2026Updated 4 months ago
- A list for Spring Security☆129Jan 16, 2024Updated 2 years ago
- ☆34Sep 19, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A python module for red teams to support the continuous recon of JavaScript files and HTML script blocks in an active web application.☆14Oct 18, 2023Updated 2 years ago
- golang写的批量对目标网站进行截图的小工具，适合目标资产比较多时，快速定位薄弱点。☆32Oct 14, 2022Updated 3 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- common methods that used by my burp extension projects☆52Apr 12, 2024Updated 2 years ago
- JDBC Attack Tricks☆156Sep 3, 2023Updated 2 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- ☆93Sep 20, 2024Updated last year
- 一款辅助探测Orderby注入漏洞的BurpSuite插件☆25Oct 19, 2021Updated 4 years ago
- Thymeleaf SSTI Bypass☆13Nov 24, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆10Jul 21, 2022Updated 4 years ago
- Piper Burp Suite Extender plugin☆17Jan 15, 2026Updated 7 months ago
- HiddenDomainHunter☆20Apr 15, 2023Updated 3 years ago
- 子域名爆破，增加了智能爬虫功能☆70Mar 22, 2024Updated 2 years ago
- Spel-research☆26Jun 21, 2022Updated 4 years ago
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated last year
- Instantly suspend processes to bypass kernel driver protections.☆22Dec 10, 2024Updated last year
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆164Mar 31, 2025Updated last year
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆133Oct 12, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Rust Fuck VM☆14Dec 3, 2023Updated 2 years ago
- 一个基于Codeql规则的go靶场☆40Feb 19, 2025Updated last year
- 致远OA利用工具☆27Jul 15, 2023Updated 3 years ago
- ☆12Jan 28, 2023Updated 3 years ago
- A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692☆35Nov 7, 2022Updated 3 years ago
- ☆12Jul 13, 2023Updated 3 years ago
- 用友漏洞批量检测☆93Mar 26, 2024Updated 2 years ago
- CVE-2022-24112：Apache APISIX apisix/batch-requests RCE☆43Feb 22, 2022Updated 4 years ago
- gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)☆260Jun 13, 2026Updated 2 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- jre8u20 gadget☆34May 23, 2021Updated 5 years ago
- 一个高价值漏洞采集与推送服务 | A valueable vulnerability collection and push service☆32Sep 24, 2024Updated last year
- 一款扫描js中敏感api的burp插件☆39Aug 30, 2023Updated 3 years ago
- 阿里巴巴安全SDK，提供SSRF、JDBC、XXE防护能力☆117Oct 15, 2025Updated 10 months ago
- 这个项目主要用于辅助测试Swagger的XSS漏洞☆38Jun 11, 2022Updated 4 years ago
- 手把手教你写IAST系列☆24Jan 12, 2024Updated 2 years ago
- Some ReadObject Sink With JDBC☆244May 8, 2024Updated 2 years ago