cyllective / oauth-labsLinks
oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning
☆70Updated 9 months ago
Alternatives and similar repositories for oauth-labs
Users that are interested in oauth-labs are comparing it to the libraries listed below
Sorting:
- Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.☆65Updated last year
- Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)☆89Updated last year
- Utility for creating ZipSlip archives☆78Updated 2 years ago
- Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀☆113Updated last month
- ☆23Updated 6 months ago
- Burp Extension to add additional functionality for pentesting websocket based applications☆98Updated 3 weeks ago
- Nuclei Templates to reproduce Cracking the lens's Research☆127Updated 3 years ago
- ☆89Updated last year
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆103Updated 3 months ago
- ☆105Updated last year
- CVE-2023-33733 reportlab RCE☆119Updated 2 years ago
- Burp Suite's extension to scan and crawl Single Page Applications☆105Updated 2 years ago
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆90Updated last year
- CVE Collection of jQuery UI XSS Payloads☆118Updated 2 years ago
- Burp Suite Extension - Trigger actions and reshape HTTP request/response and WebSocket traffic using configurable rules☆104Updated 10 months ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆175Updated 11 months ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆29Updated last year
- A rapid HTTP downgrade smuggling scanner written in Go.☆307Updated last year
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆120Updated 2 years ago
- Repository to store exploits created by Assetnotes Security Research team☆182Updated last year
- gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications☆230Updated 7 months ago
- Subdomains analysis and generation tool. Reveal the hidden!☆243Updated 3 months ago
- Catalogue de payloads destinés au téléversement de fichiers. Il s'agit d'un ensemble de plusieurs fichiers contenant du code malveillant …☆40Updated last year
- This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…☆111Updated last year
- ☆40Updated 3 months ago
- Burpsuite plugin for Interact.sh☆227Updated last year
- Improve automated and semi-automated active scanning in Burp Pro☆62Updated 3 months ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆56Updated 2 years ago
- Advanced SQL Injection Techniques for Bug Bounty Hunters☆72Updated last year
- Enumerate / Dump Docker Registry☆181Updated last year