This lab is for **EDUCATIONAL PURPOSES ONLY**. Use it responsibly and only on systems you own or have explicit permission to test. Do not use these techniques on systems without authorization.
☆24Feb 20, 2026Updated 6 months ago
Alternatives and similar repositories for ZACK0X01-BAC-LAB
Users that are interested in ZACK0X01-BAC-LAB are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆58Feb 20, 2026Updated 6 months ago
- ☆22Mar 6, 2026Updated 6 months ago
- ☆115Mar 30, 2026Updated 5 months ago
- SSRFHunter☆18Jan 17, 2026Updated 7 months ago
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆19Jun 22, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆283Dec 6, 2025Updated 9 months ago
- ☆265Dec 10, 2025Updated 8 months ago
- ☆16May 17, 2024Updated 2 years ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated last month
- 0xJS is an AI-powered JavaScript Security Tool☆67Apr 16, 2026Updated 4 months ago
- LiteSpeed Cache Privilege Escalation PoC☆23Aug 25, 2024Updated 2 years ago
- ☆13Apr 6, 2022Updated 4 years ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆26Jul 15, 2026Updated last month
- Pentest Checklists☆21Aug 23, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆94Aug 24, 2026Updated last week
- Simple MITM Project☆25Aug 16, 2026Updated 3 weeks ago
- ☆15May 22, 2023Updated 3 years ago
- Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter☆64Feb 9, 2026Updated 6 months ago
- ☆48Sep 21, 2025Updated 11 months ago
- RepShot · Generate professional security finding cards directly from Burp Suite Repeater.☆108May 31, 2026Updated 3 months ago
- Monitor your targets and hunt fresh assets in real time.☆193Feb 23, 2026Updated 6 months ago
- ☆39Jul 29, 2026Updated last month
- MCP server for Caido proxy integration. Enables AI assistants like Claude Code to browse, analyse, and interact with HTTP traffic.☆119Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 7 months ago
- ☆13May 20, 2022Updated 4 years ago
- ☆20Nov 25, 2024Updated last year
- ☆28Dec 4, 2025Updated 9 months ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆61Jul 12, 2026Updated last month
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 2 months ago
- Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own person…☆153Dec 18, 2025Updated 8 months ago
- Smilex-Eye is a high-speed, advanced OSINT suite that bridges the gap between raw global internet data and actionable security intelligen…☆34Jun 25, 2026Updated 2 months ago
- ☆47Sep 25, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆68May 2, 2026Updated 4 months ago
- crawler for finding reflected parameters and reflecting special characters!☆21Dec 2, 2024Updated last year
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- BountyLens MCP server — connect Claude Code to your Hunter Tracker☆64Jun 22, 2026Updated 2 months ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 9 months ago
- Collection of antivirus bypass techniques☆13Nov 20, 2023Updated 2 years ago
- My-custom-sensitive-info-disclsure-nuclei-template☆34Jan 3, 2026Updated 8 months ago