1348 matches found
w3af
w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...
wvctf
WebVulnCTF WVCTF oder WebVulnCTF ist eine spielerische Webplattform, die Schulungen in Pentesting und Sicherheit der Webanwendungsentwicklung auf unterhaltsame Weise fördert. Durch ein Belohnungssystem muss der Benutzer nach einer Reihe von Flags in der anfälligen Anwendung suchen, die häufigen...
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
Apache Tomcat Examples Web Application - Cross-Site Scripting
Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...
awesome-web-hacking
awesome-web-hacking Questa lista è per chiunque desideri imparare la sicurezza delle applicazioni web ma non abbia un punto di partenza. Puoi contribuire inviando Pull Request per aggiungere ulteriori informazioni. Se non vuoi fare PR, puoi twittarmi a @infoslack Indice dei contenuti Books...
jsfinder
Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...
Firefox-Security-Toolkit
Firefox Security Toolkit Uno strumento che trasforma i browser Firefox in una suite per penetration testing Come? Scarica le estensioni più importanti e le installa sul tuo browser. Le estensioni utilizzate sono state scelte tramite un sondaggio nella comunità della sicurezza informatica. Sulla...
AutoRepeater
AutoRepeater: Automatisiertes Wiederholen von HTTP-Anfragen mit Burp Suite tl;dr Importiere AutoRepeater.jar im Extender Einige kurze Hinweise AutoRepeater sendet nur Anfragen erneut, die durch eine definierte Ersetzung verändert werden. Wenn AutoRepeater eine Anfrage empfängt, die den Bedingunge...
0l4bs
0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : root@kitploit: Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 |...
dawnscanner
Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...
CVE-2025-55182_Vulnerable-Application
CVE-2025-55182 असुरक्षित प्रयोगशाला आधुनिक वेब फ्रेमवर्क में सुरक्षा कमजोरियों को प्रदर्शित करने के लिए असुरक्षित रिएक्ट सर्वर कम्पोनेंट्स का उपयोग करने वाली शैक्षणिक परीक्षण प्रयोगशाला। ⚠️ महत्वपूर्ण अस्वीकरण यह एप्लिकेशन जानबूझकर असुरक्षित है और इसे केवल नियंत्रित वातावरण में शैक्षणिक उद्देश्यों...
tachyon
Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...
Pegasus-Pentest-Arsenal
Pegasus Pentest Arsenal PPA root@kitploit: /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/| /;/ '; |;|,/,/,/,/,/,/,/| ██████╗ ███████╗ ██████╗...
Interview_Tips
Consigli per i Colloqui Sicurezza Informatica Questa pagina è un riepilogo dei colloqui che ho affrontato, coprendo una discreta varietà di ruoli, ricevendo diversi rifiuti, ma imparando da ogni colloquio, raccogliendo feedback costruttivi e andando avanti. Spero che queste domande/consigli possa...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-46581
In Eclipse Mojarra versions 2.3 and following, URL handing in DefaultFaceletFactory does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal request, with the privileges of the target...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
React Router: Open redirect leading to XSS
Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors...
CVE-2026-10857 Reflected XSS in Akinsoft's e-Commerce
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. E-Commerce allows Reflected XSS. This issue affects e-Commerce: before 1.25.01.06...