Vulnerable SAML infrastructure training applicaiton
☆57Feb 2, 2023Updated 3 years ago
Alternatives and similar repositories for VulnerableSAMLApp
Users that are interested in VulnerableSAMLApp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Practice hacking JWT tokens☆118Sep 8, 2022Updated 4 years ago
- GraphQL security workshop labs☆125Jan 31, 2026Updated 7 months ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆332Mar 27, 2024Updated 2 years ago
- ☆15Sep 11, 2020Updated 6 years ago
- Assists in mass exportation of Nessus scans☆19Apr 20, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Lab that will help you to understand how type juggling vulnerability works.☆22Sep 23, 2020Updated 5 years ago
- Vulnerable demo application for the race condition☆22Apr 27, 2021Updated 5 years ago
- Basic implementation of certstream to print new subdomains and domains☆37Jul 6, 2021Updated 5 years ago
- This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities☆95Jun 11, 2023Updated 3 years ago
- Prototype Pollution Lab☆18Nov 20, 2020Updated 5 years ago
- Go scripts for checking API key / access token validity☆224Aug 3, 2021Updated 5 years ago
- My gfPatterns☆15Aug 31, 2021Updated 5 years ago
- OWASP practice lab, just a few copy/pastes away. Fully stacked and ready to go with Docker☆23Oct 13, 2018Updated 7 years ago
- An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentes…☆227Aug 26, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A list of "secrets" from JWT sample code and readme files.☆57Oct 28, 2020Updated 5 years ago
- vulnerable single sign on☆154Aug 1, 2024Updated 2 years ago
- A penetration testing tool for firestore databases☆13Nov 5, 2020Updated 5 years ago
- A set of scripts to help automate the management of Burp Collaborator☆14Sep 5, 2025Updated last year
- Custom scripts for the PIPER Burp extensions.☆98Sep 24, 2023Updated 2 years ago
- ☆16Jan 27, 2026Updated 7 months ago
- List HackerOne private program assets☆157Jun 24, 2021Updated 5 years ago
- Same Origin XSS challenge☆64Apr 7, 2022Updated 4 years ago
- Hidden parameters discovery suite☆225Nov 14, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An Intentionally designed Vulnerable Android Application built in Kotlin.☆260Mar 2, 2022Updated 4 years ago
- Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests☆21May 1, 2017Updated 9 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- Prototype-Pollution-Lab to chain the vulnerabilities between multiple accounts.☆13Sep 11, 2021Updated 5 years ago
- Java deserialization exploitation lab.☆234Mar 1, 2019Updated 7 years ago
- A lab for playing with NoSQL Injection☆138Feb 23, 2026Updated 6 months ago
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆30Oct 18, 2021Updated 4 years ago
- A simple web app with a XXE vulnerability.☆229Nov 10, 2021Updated 4 years ago
- #JavascriptRecon #bugbounty☆21Aug 18, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- SAML2 Burp Extension☆449Feb 24, 2026Updated 6 months ago
- Find subdomains and takeovers.☆85Dec 2, 2022Updated 3 years ago
- Jboss_JMXInvokerServlet_Deserialization_RCE☆21Sep 3, 2019Updated 7 years ago
- ☆10Oct 30, 2019Updated 6 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 5 years ago
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆21Apr 28, 2019Updated 7 years ago
- JSON CSRF PoC☆14Aug 1, 2020Updated 6 years ago