engn33r / awesome-redos-security
List of RegEx DoS (ReDoS) CVEs and resources
☆27Updated 2 years ago
Alternatives and similar repositories for awesome-redos-security
Users that are interested in awesome-redos-security are comparing it to the libraries listed below
Sorting:
- ☆71Updated 3 years ago
- DOM Clobbering Wiki, Browser Testing, and Payload Generation☆49Updated 3 weeks ago
- ☆56Updated 3 years ago
- Run CodeQL queries at scale using Multi-Repository Variant Analysis (MRVA)☆58Updated last month
- *Unofficial* lgtm.com CLI — Use at your own risk. Also don't add more than 3K projects to "My projects" list.☆13Updated 3 years ago
- a repository of all the CTF challenges I've made for public events☆53Updated last year
- Compiled dataset of Java deserialization CVEs☆61Updated 4 years ago
- Adds extensibility to Burp by using a list of payloads to pattern match on HTTP responses highlighting interesting and potentially vulner…☆15Updated last year
- Looking for JAR files that are vulnerable to Log4j RCE (CVE‐2021‐44228)?☆45Updated 3 years ago
- Client-Side Prototype Pollution Tools☆84Updated 3 years ago
- Same Origin XSS challenge☆58Updated 3 years ago
- SSRF to TCP Port Scanning, Banner and Private IP Disclosure by abusing the FTP protocol/clients☆70Updated 3 years ago
- ☆94Updated 3 years ago
- ☆34Updated 3 years ago
- Fork of https://github.com/PortSwigger/param-miner for header smuggling research☆12Updated 3 years ago
- Fast, simple library in Go to fetch CVEs from the National Vulnerability Database feeds☆26Updated last year
- Searcher for cross-site leaks (XS-Leaks)☆82Updated 2 years ago
- websocket-connection-smuggler☆68Updated 5 years ago
- This extension provides a way to discover NoSQL injection vulnerabilities.☆9Updated 4 years ago
- Collection of ProjectDiscovery wallpapers☆30Updated last year
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆18Updated 7 years ago
- ☆80Updated last year
- No longer maintained. Timing attacks on a browsers cache to try to predict websites/subreddits that have been viewed☆12Updated 3 years ago
- A cheatsheet for exploiting server-side SVG rasterization.☆30Updated 2 years ago
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆20Updated 4 years ago
- TheThing: an open-source tool to detect DOM Clobbering vulnerabilities☆47Updated last year
- Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code☆64Updated 3 years ago
- Playground for Race Condition attack☆24Updated 2 years ago
- A vulnerability fuzzing tool written in bash, it contains the most commonly used tools to perform vulnerability scan☆79Updated 3 years ago
- PoC for iTerm2 CVEs CVE-2024-38396 and CVE-2024-38395 which allow code execution☆19Updated 11 months ago