Collection of scripts that aid in penetration testing of JSON Web Tokens
☆58Feb 2, 2019Updated 7 years ago
Alternatives and similar repositories for JWT_Hacking
Users that are interested in JWT_Hacking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 8 years ago
- This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping☆48Nov 12, 2019Updated 6 years ago
- A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!☆35Nov 17, 2018Updated 7 years ago
- A playground to practice SSRF Attacks against web apps☆17Oct 15, 2018Updated 8 years ago
- cve-2014-0130 rails directory traversal vuln☆18May 15, 2017Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Dec 12, 2018Updated 7 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆32Jan 22, 2018Updated 8 years ago
- A collection of awesome penetration testing resources, tools and other shiny things☆17Jul 25, 2026Updated 3 months ago
- Simple multi threaded tool to extract domain related data from commoncrawl.org☆30Jul 17, 2018Updated 8 years ago
- Simple XXE test suite generated specifically for SAML interfaces☆23May 18, 2018Updated 8 years ago
- Hacking Wordlist collections for password cracking are attached in the below files☆16Apr 5, 2018Updated 8 years ago
- The repository for Building visualisation platforms for OSINT data using open source solutions☆29Aug 21, 2018Updated 8 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status☆87Oct 29, 2020Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆21Apr 28, 2019Updated 7 years ago
- Merge results from NMAP and Masscan into one CSV file☆18Jun 19, 2018Updated 8 years ago
- Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQL…☆62May 4, 2017Updated 9 years ago
- 多线程批量扫描ssrf漏洞☆29Sep 6, 2017Updated 9 years ago
- Facebook Bug Bounties☆106Feb 24, 2021Updated 5 years ago
- notorious BIG IP☆15Aug 8, 2019Updated 7 years ago
- A mini webserver with FTP support for XXE payloads☆344Jan 3, 2024Updated 2 years ago
- Java Binary data Deserializer/Serializer - Convert serialized Java Objects into readable XML☆13Feb 25, 2019Updated 7 years ago
- ☆126Sep 2, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- OAuth Security Cheatsheet☆39May 12, 2014Updated 12 years ago
- A Jenkins Pentest/Security Toolkit written in Python☆15Sep 18, 2017Updated 9 years ago
- ☆53Aug 10, 2018Updated 8 years ago
- Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!☆296Jun 10, 2019Updated 7 years ago
- A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.☆43May 1, 2020Updated 6 years ago
- A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials☆10Jun 30, 2021Updated 5 years ago
- Repository for all the workshop content delivered at nullcon X on 1st of March 2019☆79Apr 4, 2019Updated 7 years ago
- Research on GraphQL from an AppSec point of view.☆416May 24, 2023Updated 3 years ago
- A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commo…☆49Apr 8, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Uses Go net/http library to distinguish alive hosts from a give list of hosts/urls☆12Dec 23, 2019Updated 6 years ago
- Simple Server Side Request Forgery services enumeration tool.☆56Aug 23, 2018Updated 8 years ago
- Scripts and tools for AWS Pentest☆54Oct 22, 2020Updated 6 years ago
- POC for CVE-2018-15685☆42Aug 24, 2018Updated 8 years ago
- Burp extension to automatically drop requests that match a certain regex.☆11Mar 10, 2023Updated 3 years ago
- Some random scripts. Just trying to be like the cool kids.☆100Jul 1, 2018Updated 8 years ago
- Learning Penetration Testing of Android Applications☆81Aug 5, 2017Updated 9 years ago