engn33r / awesome-redos-security
List of RegEx DoS (ReDoS) CVEs and resources
☆24Updated last year
Related projects ⓘ
Alternatives and complementary repositories for awesome-redos-security
- ☆55Updated 3 years ago
- Client-Side Prototype Pollution Tools☆84Updated 3 years ago
- ☆69Updated 3 years ago
- DOM Clobbering Wiki, Browser Testing, and Payload Generation☆43Updated last week
- This repo contains solution for ctf challenges☆31Updated 10 months ago
- Searcher for cross-site leaks (XS-Leaks)☆81Updated last year
- Same Origin XSS challenge☆56Updated 2 years ago
- Burp extension to generate multi-step CSRF POC.☆29Updated 5 years ago
- Official Android Pentesting Slide By RootBakar☆14Updated 3 years ago
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆54Updated last year
- Collection of quirky behaviours of code and the CTF challenges that I made around them.☆27Updated 3 years ago
- Slides and other material from various conference presentations.☆40Updated 3 years ago
- List all public repositories for (valid) GitHub usernames☆68Updated last year
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆33Updated 2 years ago
- Playground☆28Updated last week
- A tool to test working urls.☆42Updated 4 years ago
- A tool which helps identifying client-side prototype polluting libraries☆36Updated 6 months ago
- A cheatsheet for exploiting server-side SVG rasterization.☆29Updated 2 years ago
- BBSSRF - Bug Bounty SSRF is a powerful tool to check SSRF OOB connection☆38Updated last year
- ☆15Updated 3 years ago
- 🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline☆58Updated last year
- a repository of all the CTF challenges I've made for public events☆50Updated last year
- an Evil Java RMI Registry.☆45Updated last year
- PoC for iTerm2 CVEs CVE-2024-38396 and CVE-2024-38395 which allow code execution☆20Updated 5 months ago
- Identifies vulnerabilities in network_security_config.xml, AndroidManifest.xml and if Firebase URL are accessible publicly☆46Updated last year
- Security Advisories☆32Updated last year
- Collection of ProjectDiscovery wallpapers☆29Updated last year
- ☆92Updated 3 years ago
- A vulnerability fuzzing tool written in bash, it contains the most commonly used tools to perform vulnerability scan☆79Updated 3 years ago
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆74Updated 2 years ago