The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2.0 Service Providers, also supporting SCIM protocol.
☆67Sep 18, 2026Updated last month
Alternatives and similar repositories for maSSO
Users that are interested in maSSO are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An extension to find callback endpoints in the background while searching the Web☆48Mar 26, 2026Updated 6 months ago
- A Burp extension that easily allows for switching a request's session (headers, cookies) on the fly☆33Jun 17, 2026Updated 4 months ago
- Ethiack AI Pentesting Benchmark Framework☆107Aug 20, 2026Updated 2 months ago
- Blogpost series showcasing interesting cloud - web app security bugs☆77Jul 20, 2026Updated 3 months ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆14Aug 14, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆29Jun 16, 2026Updated 4 months ago
- Fuzzing Infrastructure using afl++ for coverage guided fuzzing including triaging and live dashboard.☆50Jul 23, 2026Updated 3 months ago
- ☆34Jun 18, 2026Updated 4 months ago
- ☆16Jun 14, 2026Updated 4 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆35Jul 24, 2026Updated 2 months ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆68Mar 2, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.☆196Updated this week
- ☆11Apr 25, 2019Updated 7 years ago
- ☆46May 12, 2025Updated last year
- Burp plugin for jxscout☆25May 12, 2025Updated last year
- ☆48Sep 21, 2025Updated last year
- Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used …☆10Jun 30, 2025Updated last year
- Deserialization payload generator for a variety of .NET formatters☆243Updated this week
- DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get …☆23Oct 12, 2026Updated last week
- ☆27Jun 6, 2026Updated 4 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated 3 months ago
- Detect the cloud / hosting provider of a given host. Fast, static & offline☆16Updated this week
- API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs☆139Oct 3, 2026Updated 2 weeks ago
- An undeletable supercookie that lives in your GPU's cache☆30Aug 17, 2026Updated 2 months ago
- ☆40Aug 2, 2024Updated 2 years ago
- AI for Web3 Security: Zero to Hero — a hands-on course building an AI bug-hunting harness, module by module.☆45Oct 7, 2026Updated 2 weeks ago
- Discover K8s Services & Pods through DNS Records in CoreDNS☆15Sep 2, 2025Updated last year
- Library of Exploiting Last Frame Synchronization (also know as Single Packet Attack) on HTTP/3 - Manipulated version of quic-go lib☆20Sep 10, 2026Updated last month
- Burp Suite MCP Assistant in IDE Extension☆15Dec 31, 2025Updated 9 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆117Jun 23, 2025Updated last year
- Exploit for CVE-2024-0402 in Gitlab☆15Mar 18, 2025Updated last year
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago
- A simple recon pipeline☆39Sep 24, 2026Updated 3 weeks ago
- A template for building your own AI/LLM harness☆107Jul 30, 2026Updated 2 months ago
- A tool to extract and dump files of mercurial SCM exposed on a web server.☆13Jan 31, 2025Updated last year
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆317Sep 30, 2026Updated 3 weeks ago