Chupabase is an automated security assessment tool designed to identify and exploit misconfigurations in Supabase-backed applications by reconstructing API endpoints from client-side JavaScript bundles and testing access using the public (anon) role.
☆29Mar 25, 2026Updated 5 months ago
Alternatives and similar repositories for chupabase
Users that are interested in chupabase are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Static auditor for randomness and nonce hygiene in Python source - flags weak PRNGs, hardcoded keys, reused counters, static IVs, short s…☆25Sep 5, 2026Updated 2 weeks ago
- ☆27Mar 18, 2026Updated 6 months ago
- A better way of querying certificate transparency logs☆89Mar 30, 2025Updated last year
- XSS PoCs to elevate your alert()☆25May 18, 2023Updated 3 years ago
- Explore RootSec's DDOS Archive, featuring top-tier scanners, powerful botnets (Mirai & QBot) and other variants, high-impact exploits, ad…☆14Aug 22, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- fsociety Hacking Tools Pack – A Penetration Testing Framework☆15Aug 8, 2024Updated 2 years ago
- A tool to extract cookies and passwords from major web browsers, passively, with no process injection.☆62Oct 31, 2025Updated 10 months ago
- ☆12Jul 4, 2024Updated 2 years ago
- This repository presents a proof-of-concept of CVE-2024-23897☆18Apr 16, 2024Updated 2 years ago
- 远程探测 remote desktop licensing 服务开放情况，用于 CVE-2024-38077 漏洞快速排查☆13Aug 9, 2024Updated 2 years ago
- Rubidea - Bind XSS Server to Steal cookies.☆14May 2, 2020Updated 6 years ago
- A Go toolkit for studying and testing the WhatsApp Web protocol, with a built-in REST API for integrations (n8n, webhooks, and more). All…☆33Apr 15, 2026Updated 5 months ago
- Translates version 4.2 of OWASP Web Security Testing Guide to Portuguese.☆40Jul 29, 2024Updated 2 years ago
- Laboratório prático de cibersegurança simulando um Security Operations Center (SOC) na Google Cloud Platform (GCP). Tecnologias utilizada…☆19Dec 29, 2025Updated 8 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A Python script to authenticate and test access to Google Cloud Platform (GCP) resources.☆19Jan 31, 2024Updated 2 years ago
- Audio Transcription for WhatsApp☆15Jun 28, 2024Updated 2 years ago
- A powerful pentesting tool for proactive detection and exploitation of dependency confusion vulnerabilities in Node.js projects. Enhance …☆15Jul 25, 2023Updated 3 years ago
- A bash tool used to install famous bug bounty tools. Mainly used when setting up a fresh environment.☆16Mar 20, 2023Updated 3 years ago
- A Webpack boilerplate with ES6 and SCSS for simple web projects.☆11Oct 27, 2016Updated 9 years ago
- OS Hardening scripts for multiple linux based operating systems. Keep in mind this is the minimum!☆20Mar 26, 2017Updated 9 years ago
- Exploit for Apache Tomcat deserialization (CVE-2020-9484) which could lead to RCE☆17Apr 17, 2023Updated 3 years ago
- Unreal Engine 5 FPS Starter C++ project ported to AngelScript☆24Oct 26, 2023Updated 2 years ago
- Full stack Laravel School Management System☆14Jun 5, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- See https://www.meriac.com/dl/HID-iCLASS-security.pdf and https://events.ccc.de/congress/2010/Fahrplan/attachments/1784_HID-iClass-27C3.p…☆14Nov 26, 2017Updated 8 years ago
- Upgrade any RCE primitive to a semi-interactive session, with an mkfifo forward shell for filtered-egress targets and modular post-exploi…☆15Jul 25, 2026Updated last month
- This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.☆36May 14, 2022Updated 4 years ago
- ☆11Dec 17, 2018Updated 7 years ago
- Some Buffer Overflow Automation Scripts I'll be using between PWK labs and Exam!☆19Nov 5, 2020Updated 5 years ago
- Basic script to generate reverse shell payloads, generally most used in ctf.☆27Mar 20, 2024Updated 2 years ago
- Golang client for querying SecurityTrails API data☆603Jan 21, 2026Updated 7 months ago
- CVE-2025-55182-bypass-waf☆31Jan 8, 2026Updated 8 months ago
- ☆21Apr 20, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 🔐 Chrome Extension - Detect hardcoded tokens, API keys & secrets in JavaScript files☆50Dec 15, 2025Updated 9 months ago
- PoC for the CVE-2021-4034 vulnerability, affecting polkit < 0.120.☆24Jan 26, 2022Updated 4 years ago
- Telegram Bot that you can check if you have an account that has been compromised in any public data breaches☆20Jun 20, 2026Updated 3 months ago
- ☆18Jan 8, 2025Updated last year
- Tool to assist bug bounty hunters☆78Mar 23, 2026Updated 5 months ago
- ☆19Nov 30, 2025Updated 9 months ago
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago