oauth security guidelines
☆233Jun 25, 2019Updated 7 years ago
Alternatives and similar repositories for oauth-2.0-security-cheat-sheet
Users that are interested in oauth-2.0-security-cheat-sheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆332Mar 27, 2024Updated 2 years ago
- GraphQL automated security testing toolkit☆335Feb 20, 2024Updated 2 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆429Oct 14, 2026Updated 3 weeks ago
- A very vulnerable implementation of a GraphQL API.☆63Nov 12, 2021Updated 4 years ago
- A projectdiscovery driven attack surface monitoring bot powered by axiom☆188Aug 11, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆181Oct 26, 2024Updated 2 years ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- An invoice management application built on the MEAN stack with intentional vulnerabilities used to demonstrate insecure configurations an…☆16Sep 4, 2020Updated 6 years ago
- Proof of concept code for Datadog Security Labs referenced exploits.☆451Sep 14, 2026Updated last month
- ☆438Jun 1, 2021Updated 5 years ago
- Awesome secure by default libraries to help you eliminate bug classes!☆723Dec 6, 2025Updated 11 months ago
- Custom scripts for the PIPER Burp extensions.☆95Sep 24, 2023Updated 3 years ago
- ☆32Jun 23, 2021Updated 5 years ago
- 🦄🔒 Awesome list of secrets in environment variables 🖥️☆913Sep 21, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An Intentionally designed Vulnerable Android Application built in Kotlin.☆259Mar 2, 2022Updated 4 years ago
- A collection of simple tools and poc-builders☆39May 28, 2026Updated 5 months ago
- Python script to launch burp scans automatically☆32Jul 18, 2021Updated 5 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆995Dec 31, 2021Updated 4 years ago
- ☆1,203Sep 2, 2022Updated 4 years ago
- Websec interview questions by tib3rius answered☆310Nov 13, 2023Updated 2 years ago
- Useful scripts, Docker images, docker-compose apps, and Terraform modules.☆148Nov 1, 2026Updated last week
- ☆247Oct 27, 2026Updated last week
- Everything about xss protection technology☆15Oct 22, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.☆108Mar 1, 2022Updated 4 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆191Dec 3, 2024Updated last year
- [A]ndroid [A]pplication [P]entest [G]uide☆122Oct 10, 2019Updated 7 years ago
- Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).☆143May 1, 2025Updated last year
- This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…☆2,853Apr 6, 2026Updated 7 months ago
- Modular Kubernetes lab which provides an easy and streamlined way to deploy a test cluster with support for different components.☆52Aug 1, 2026Updated 3 months ago
- A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.☆55Apr 25, 2022Updated 4 years ago
- ☆24Jan 26, 2021Updated 5 years ago
- A cheatsheet for exploiting server-side SVG processors.☆804Jul 2, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Sep 14, 2021Updated 5 years ago
- Client Side Prototype Pollution Scanner☆530Sep 17, 2022Updated 4 years ago
- Recurrent Neural Network SubDomain Discovery Tool☆97Sep 20, 2022Updated 4 years ago
- Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)☆83Apr 5, 2021Updated 5 years ago
- Automatically compile an AWS Service Control Policy that ONLY allows AWS services that are compliant with your preferred compliance frame…☆224Jul 28, 2026Updated 3 months ago
- Recon tool for URLs discovery☆12Jun 19, 2024Updated 2 years ago
- Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes☆32Dec 10, 2022Updated 3 years ago