The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2.0 Service Providers, also supporting SCIM protocol.
☆70Sep 18, 2026Updated last month
Alternatives and similar repositories for maSSO
Users that are interested in maSSO are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AWS Elastic Load Balancer Configuration Auditor☆13Apr 28, 2026Updated 6 months ago
- An extension to find callback endpoints in the background while searching the Web☆49Mar 26, 2026Updated 7 months ago
- A Burp extension that easily allows for switching a request's session (headers, cookies) on the fly☆33Jun 17, 2026Updated 4 months ago
- Birds-eye view for web application coverage on a domain.☆12Apr 4, 2026Updated 7 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Blogpost series showcasing interesting cloud - web app security bugs☆79Jul 20, 2026Updated 3 months ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆15Aug 14, 2026Updated 2 months ago
- Ethiack AI Pentesting Benchmark Framework☆108Aug 20, 2026Updated 2 months ago
- ☆16Jun 14, 2026Updated 4 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 9 months ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- Fuzzing Infrastructure using afl++ for coverage guided fuzzing including triaging and live dashboard.☆50Jul 23, 2026Updated 3 months ago
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆68Mar 2, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Deserialization payload generator for a variety of .NET formatters☆247Oct 21, 2026Updated 3 weeks ago
- A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.☆200Nov 2, 2026Updated last week
- ☆46May 12, 2025Updated last year
- ☆48Sep 21, 2025Updated last year
- A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI☆136Oct 26, 2026Updated 2 weeks ago
- Burp plugin for jxscout☆26May 12, 2025Updated last year
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆116Jun 23, 2025Updated last year
- This terraform provider can be used to get remote code execution by injecting a dummy resource in a writeable state file.☆68Jan 25, 2025Updated last year
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Detect the cloud / hosting provider of a given host. Fast, static & offline☆16Updated this week
- ☆40Aug 2, 2024Updated 2 years ago
- Fast exfiltration of text using only CSS and Ligatures☆110Mar 16, 2026Updated 7 months ago
- HTTP Desync research factory.☆127Aug 5, 2026Updated 3 months ago
- GitHub Actions security scanner: pin actions to SHAs, detect script injection, audit permissions. Fix supply chain vulnerabilities.☆13Feb 28, 2026Updated 8 months ago
- An application for distributing oclHashcat tasks.☆21Nov 19, 2015Updated 10 years ago
- 🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends☆72Feb 2, 2024Updated 2 years ago
- Library of Exploiting Last Frame Synchronization (also know as Single Packet Attack) on HTTP/3 - Manipulated version of quic-go lib☆20Sep 10, 2026Updated 2 months ago
- ☆35Jun 18, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆14Jul 18, 2026Updated 3 months ago
- API Security Researcher☆17Updated this week
- Burp Suite MCP Assistant in IDE Extension☆15Dec 31, 2025Updated 10 months ago
- Home for the Semgrep Claude Code Plugin.☆20Updated this week
- A command-line tool for parsing and filtering FFUF JSON output files. Quickly search, filter, and analyze your web fuzzing results with c…☆15Jan 25, 2026Updated 9 months ago
- ☆27Jun 6, 2026Updated 5 months ago
- ☆13Jun 24, 2025Updated last year
Are these results useful?