A list of threat sinks used in the manual security source code review for application security
☆76May 9, 2023Updated 3 years ago
Alternatives and similar repositories for CodeAllTheThings
Users that are interested in CodeAllTheThings are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC + vulnerability details for CVE-2022-25262 / JetBrains Hub single-click SAML response takeover☆17Jul 5, 2022Updated 4 years ago
- A cheatsheet for exploiting server-side SVG rasterization.☆31Jul 5, 2022Updated 4 years ago
- Regex patterns for manual application source code review☆36Dec 14, 2020Updated 5 years ago
- Trying to reproduce CVE-2021-43908☆10Aug 14, 2022Updated 4 years ago
- Megagrep helps beginning a code review by searching for keywords in the code using "grep". It does not search for vulnerabilities directl…☆14Aug 21, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Tool for checking reflecting Parameters in a URL.☆10Aug 31, 2020Updated 6 years ago
- Automatic tool using for crawling code to find low-hang fruit vulnerabilities - Based on OWASP Secure Code Review Guide☆21Aug 31, 2020Updated 6 years ago
- gSAST - Grep Static Analysis Security Tool☆13Mar 30, 2024Updated 2 years ago
- code reviews to practice☆19Jul 22, 2021Updated 5 years ago
- ☆27Jul 30, 2021Updated 5 years ago
- PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication☆35Jul 5, 2022Updated 4 years ago
- ☆23Jun 30, 2021Updated 5 years ago
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- JavaScript functions intended to be used as an XSS payload against a WordPress admin account.☆58Oct 6, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Advanced external automation on bug bounty programs by running the best set of tools to perform scanning and finding out vulnerabilities.☆107Jun 28, 2022Updated 4 years ago
- Hidden parameters discovery suite☆222Nov 14, 2022Updated 3 years ago
- ☆16Sep 4, 2025Updated last year
- CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability☆17May 27, 2024Updated 2 years ago
- ☆18Oct 30, 2022Updated 4 years ago
- ☆11Oct 7, 2022Updated 4 years ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Feb 15, 2022Updated 4 years ago
- ☆143Jul 25, 2022Updated 4 years ago
- A basic golang server/client for distributing tasks over multiple systems.☆39Jul 20, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- All the code snippets from my Secure Code Review series on youtube (youtube.com/@muqsitbaig)!☆25Jul 28, 2024Updated 2 years ago
- TapJacking Attacks Demo☆20Apr 25, 2021Updated 5 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- Token Elevation to authorized user as SYSTEM or Domain Admins☆26Nov 22, 2025Updated 11 months ago
- Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.☆68Apr 12, 2022Updated 4 years ago
- Install Burpsuite pro in Linux OS☆15Mar 24, 2024Updated 2 years ago
- API fuzzer that exposes security flaws by sending malformed inputs☆16Sep 4, 2024Updated 2 years ago
- Automatically exported from code.google.com/p/ra2-dom-xss-scanner☆28Jan 4, 2016Updated 10 years ago
- Burp-Addons : Some of Burp Addons I use ( Mindak ak fahem )☆12Sep 1, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.☆61Mar 2, 2022Updated 4 years ago
- Reproducing the SkeletonKey malware.☆12Apr 6, 2024Updated 2 years ago
- Signatures for jaeles scanner by @j3ssie☆115Apr 20, 2024Updated 2 years ago
- A companion repo to accompany detailed guides and YouTube content to allow users to follow along☆13Aug 29, 2020Updated 6 years ago
- Learning source code review, spot vulnerability, find some ways how to fix it.☆29Nov 17, 2022Updated 3 years ago
- Useful "Match and Replace" burpsuite rules☆374Sep 26, 2023Updated 3 years ago
- source code for the examples and topics from the book☆10Mar 11, 2019Updated 7 years ago