cyllective / oauth-labsLinks
oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning
☆72Updated last year
Alternatives and similar repositories for oauth-labs
Users that are interested in oauth-labs are comparing it to the libraries listed below
Sorting:
- Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.☆66Updated last year
- Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)☆91Updated last year
- Improve automated and semi-automated active scanning in Burp Pro☆63Updated 7 months ago
- Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀☆126Updated 5 months ago
- ☆42Updated last month
- ☆90Updated last year
- ☆110Updated last year
- Utility for creating ZipSlip archives☆80Updated 2 years ago
- Nuclei Templates to reproduce Cracking the lens's Research☆130Updated 4 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆120Updated 2 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆310Updated last year
- Burp Suite's extension to scan and crawl Single Page Applications☆106Updated 2 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆175Updated last year
- Burp Suite Extension - Trigger actions and reshape HTTP request/response and WebSocket traffic using configurable rules☆105Updated last month
- This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite …☆46Updated last month
- CVE Collection of jQuery UI XSS Payloads☆121Updated 3 years ago
- ☆138Updated last year
- Subdomains analysis and generation tool. Reveal the hidden!☆244Updated 7 months ago
- CVE-2023-33733 reportlab RCE☆119Updated 2 years ago
- ☆91Updated last month
- Burp Extension to add additional functionality for pentesting websocket based applications☆103Updated 4 months ago
- ☆25Updated 10 months ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆83Updated 2 years ago
- Security Advisories☆35Updated 2 months ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆34Updated last year
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆90Updated last year
- A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities☆119Updated 2 years ago
- gRPC-Web Pentesting Suite + Burp Suite Extension / Hack gRPC-Web Applications (Official BApp Extension Available)☆243Updated 2 months ago
- Advanced SQL Injection Techniques for Bug Bounty Hunters☆74Updated last year
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆56Updated 2 years ago