116 matches found
payloads
payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...
LKWA
LKWA Lesser Known Web Attack Lab is for intermediate pentester that can test and practice lesser known web attacks such as Object Injection, XSSI, PHAR Deserialization, variables variable ..etc. Write-ups are welcome. My own walk-through is here . Installation - Local Just clone the git with git...
whale-sentinel-services
🐋 Whale Sentinel Services 🔧 Overview Whale Sentinel Services is the centralized backend of the Whale Sentinel threat detection ecosystem. These microservices perform real-time threat detection, agent coordination, DGA analysis, and web attack inspection, enabling deep security observability and...
dvwassl
SSL-enabled Damn Vulnerable Web App Run an SSL-enabled Damn Vulnerable Web App. Why? You might want to test web attack detections over SSL. Build the image docker build -t dvwassl:latest . Run the container docker run -d -p 443:443 dvwassl:latest Custom SSL certificate and key The image comes wit...
Network-Analysis-Tools
Pcap Capture File Analysis Toolv.1 !CONTACT! | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Features 1-Top 10 Visited Sites 2-Emails 3-All Request Urls 4-User-Agents List 5-String Grep Mode 6-Connection details 7-Ports Used 8-ALL Ip List 9-Manuel Pack...
Arkhota
Arkhota, a web brute forcer for Android What? Arkhota is a web HTTP/S brute forcer for Android OS. Why? A web brute forcer is always in a hacker's computer, for obvious reasons. Sometimes attacks require to be quick or/and with minimal device preparation. Also a phone takes less attention rather...
GPEWebDefender
GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...
payloads
payloads Git All the Payloads! Eine Sammlung von Web-Angriffs-Payloads. Pull-Requests sind willkommen! Verwendung Führe ./get.sh aus, um externe Payloads herunterzuladen und komprimierte Payload-Dateien zu entpacken. Payload-Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...
An Evaluation of the Semantic Understanding Capabilities of Large Language Models for Web Attack Payloads
Computer vision services delivered through Web interfaces and APIs process textual requests for image-resource acquisition, inference-task configuration, and result management, making Web attack-payload analysis relevant to their deployment security. Large language models LLMs can identify payloa...
xss_db
RUBY RUBY는 웹 요청의 공격 가능성을 탐지하고, 위험도와 정책에 따라 대응 전략을 선택해 방어 기법을...
GPEWebDefender
GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...
web-attack-log-analyzer
Web Server Log Analyzer — Web Attack Detection A Python tool...
GPEWebDefender — Updated!
GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...
EUVD-2026-47386
Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain component: Product Quality Management. The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2026-62549
Vulnerability in the Oracle HRMS UK product of Oracle E-Business Suite component: UK Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS UK. While the vulnerability...
PT-2026-63052
Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a...
Web-Attack-Log-Analysis
🛡️ Module A — Web Attack Simulation Simulate six real-world...
CVE-2026-56359
n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow where authenticated users can inject malicious JavaScript URLs into OAuth2 credential Authorization URL fields. Attackers can craft malicious credentials and trick victims into clicking the OAuth...
PT-2026-50070
Vulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...