zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

dalfox

Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

oproxy

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...

ImHex

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. /ˈɪmhɛks/ Supporting If you like my work, please consider supporting me on GitHub Sponsors, Ko-Fi or PayPal. Thanks a lot! Notable Sponsors | ---|--- | JetBrains, providing us with free All...

WordPress Laborator Neon Theme 2.0 - Cross-Site Scripting

WordPress Laborator Neon theme 2.0 contains a cross-site scripting vulnerability via the data/autosuggest-remote.php q parameter. id: CVE-2019-20141 info: name: WordPress Laborator Neon Theme 2.0 - Cross-Site Scripting author: knassar702 severity: medium description: WordPress Laborator Neon them...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

CVE-2017-17562

CVE-2017-17562 not coded by me...

ladder

Ladder Ladder is a http web proxy. 简体中文 Ladder is a developer tool for testing and analyzing paywall implementations and content delivery behavior on modern websites. It allows developers, researchers, and publishers to simulate different client environments such as browsers and crawlers and...

CSV-Injection-in-Instant-Developer-Foundation-25.0-PoC

CVE-2025-60852: CSV Injection in Instant Developer Foundation 25.0.9600 – Proof of Concept PoC 📌 Overview This repository contains a Proof of Concept PoC for a CSV Injection Formula Injection vulnerability CVE-2025-60852 affecting applications built with the Instant Developer Foundation framework...

ios-mac-app

Proton VPN for iOS and macOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies ACKNOWLEDGEMENTS.md Setup Enable Git LFS on your machine Clon...

OCSD

OCSD OWASP Certified Secure-Software Developer - the repository for the the proposed OCSD certification OWASP Project link: https://owasp.org/www-project-certified-secure-developer/...

C2Bridge

C2Bridges allow developers to create new custom communication protocols and quickly utilize them within Covenant. C2Bridges C2Bridges are used to develop an outbound command and control protocol without editing any Covenant code. For developers that feel comfortable integrating new listeners, a n...

DevGuide

OWASP Foundation Developer Guide The Developer Guide is one of the original documents from OWASP and so has a long history. The original DevGuide repository has many of the previous versions going back to the very first version 1.0 release from 2002. This is the content for the Developer Guide...

Azure-APIM-Dev-Portal-Signup-Bypass

A proof-of-concept script for bypassing a disabled developer portal signup on Azure API Management APIM by directly invoking the backend registration API. What it does Azure APIM developer portals can be configured to disable self-service signup through the portal UI. In some deployments the...

CVE-2019-0678

Vulnerability Microsoft Edge Elevation of Privilege Vulnerability Vulnerability Description This vulnerability allows an attacker to execute javascript code on every host without the permission, also an attacker can steal local system files, and this also results in changing internal developer...

conscryptchecker

conscryptchecker IMPORTANT! add your own app/google-services.json in order to successfully build...

teller

:computer: Never leave your terminal for secrets :pager: Create easy and clean workflows for working with cloud environments :magright: Scan for secrets and fight secret sprawl Teller - the open-source universal secret manager for developers Never leave your terminal to use secrets while...

CVE-2023-3163-SQL-Injection-Prevention

CVE-2023-3163-SQL-Injection-Prevention A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection CVE-2023-3163, most commonly occurs when SQL Developer version 23.1.0. CVE-2023-21969 Exploit - SQL Developer Vulnerability Check Description This repository...