oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning
☆79Dec 5, 2024Updated last year
Alternatives and similar repositories for oauth-labs
Users that are interested in oauth-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Preparation of Attack & Defense CTF for iHack 2022☆16Nov 28, 2023Updated 2 years ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆163Mar 31, 2025Updated last year
- Extract GraphQL operations from javascript☆25Mar 18, 2026Updated 7 months ago
- ☆17Dec 28, 2024Updated last year
- A simple Web-UI based Nuclei Parser☆13Mar 6, 2026Updated 7 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆34Sep 19, 2022Updated 4 years ago
- A list for Spring Security☆129Jan 16, 2024Updated 2 years ago
- The Template Injection Playground allows to test a large number of the most relevant template engines for template injection possibilitie…☆68Apr 29, 2026Updated 6 months ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- golang写的批量对目标网站进行截图的小工具，适合目标资产比较多时，快速定位薄弱点。☆32Oct 14, 2022Updated 4 years ago
- A Shodan-based tool to discover publicly exposed Ollama instances and list available LLM models.☆25May 27, 2025Updated last year
- Thymeleaf SSTI Bypass☆13Nov 24, 2021Updated 4 years ago
- JDBC Attack Tricks☆155Sep 3, 2023Updated 3 years ago
- cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件☆94Jan 17, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A collection of Server-Side Prototype Pollution gadgets and exploits☆242Feb 6, 2025Updated last year
- DLP and Firewall test suite☆17Dec 9, 2022Updated 3 years ago
- 一款辅助探测Orderby注入漏洞的BurpSuite插件☆25Oct 19, 2021Updated 5 years ago
- 与鉴权、认证、RABC、OAuth 等等一系列相关的笔记☆34Sep 27, 2026Updated last month
- HiddenDomainHunter☆20Apr 15, 2023Updated 3 years ago
- ☆10Jul 21, 2022Updated 4 years ago
- Tool to visualize the output of the WinDbg "wt" command as customizable graphic trees, to facilitate reverse engineering.☆12Nov 12, 2024Updated last year
- Rust Fuck VM☆14Dec 3, 2023Updated 2 years ago
- 子域名爆破，增加了智能爬虫功能☆70Mar 22, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Spel-research☆26Jun 21, 2022Updated 4 years ago
- 资产测绘输出xlsx表格☆14Sep 10, 2024Updated 2 years ago
- ☆94Sep 20, 2024Updated 2 years ago
- Piper Burp Suite Extender plugin☆17Jan 15, 2026Updated 9 months ago
- common methods that used by my burp extension projects☆53Apr 12, 2024Updated 2 years ago
- ☆99Dec 4, 2025Updated 10 months ago
- HyperDbg's MCP Server☆21Jul 29, 2026Updated 3 months ago
- The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.☆491Oct 3, 2023Updated 3 years ago
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆60Jul 13, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆12Jan 28, 2023Updated 3 years ago
- LogSnare: A playground for testing, preventing, and logging IDOR vulnerabilities.☆35Mar 4, 2024Updated 2 years ago
- Clear and obvious name of the exploitation technique can create a false sense of familiarity, even if its true potential was never resear…☆123Feb 22, 2026Updated 8 months ago
- ☆21Mar 3, 2026Updated 7 months ago
- Wax is a mediocre fuzzer I'm prototyping to test some ideas and get rid of others.☆17Jul 12, 2018Updated 8 years ago
- CVE-2022-24112：Apache APISIX apisix/batch-requests RCE☆43Feb 22, 2022Updated 4 years ago
- A project demonstrating an app that is vulnerable to Spring Security authorization bypass CVE-2022-31692☆35Nov 7, 2022Updated 3 years ago