ios-mac-app

Proton VPN for iOS and macOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies ACKNOWLEDGEMENTS.md Setup Enable Git LFS on your machine Clon...

CVE-2019-0678

Vulnerability Microsoft Edge Elevation of Privilege Vulnerability Vulnerability Description This vulnerability allows an attacker to execute javascript code on every host without the permission, also an attacker can steal local system files, and this also results in changing internal developer...

OCSD

OCSD OWASP Certified Secure-Software Developer - the repository for the the proposed OCSD certification OWASP Project link: https://owasp.org/www-project-certified-secure-developer/...

conscryptchecker

conscryptchecker IMPORTANT! add your own app/google-services.json in order to successfully build...

teller

:computer: Never leave your terminal for secrets :pager: Create easy and clean workflows for working with cloud environments :magright: Scan for secrets and fight secret sprawl Teller - the open-source universal secret manager for developers Never leave your terminal to use secrets while...

dalfox

Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...

oproxy

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...

ladder

Ladder Ladder is a http web proxy. 简体中文 Ladder is a developer tool for testing and analyzing paywall implementations and content delivery behavior on modern websites. It allows developers, researchers, and publishers to simulate different client environments such as browsers and crawlers and...

spamassassin

Apache SpamAssassin GitHub Actions for testing The Apache SpamAssassin project uses a subversion repo for its development process. A read-only mirror of the repo is maintained on GitHub here. The .github directory containing this README file is not part of the Apache SpamAssassin release package...

zaproxy

The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...

CVE-2024-32002

Poc for CVE-2024-32002, the script made from the developer's test case: https://github.com/git/git/commit/97065761333fd62db1912d81b489db938d8c991ddiff-2ba261bbd9de8e881d700e696eebab0df581473ba50b671b2cbe4bbee5ca87b0 This software has been created purely for the purposes of academic research and f...

guac

GUAC: Graph for Understanding Artifact Composition Note: GUAC is under active development - if you are interested in contributing, please look at contributor guide. GUAC is an OpenSSF incubating project under the Supply Chain Integrity WG. Graph for Understanding Artifact Composition GUAC...

CVE-2023-3163-SQL-Injection-Prevention

CVE-2023-3163-SQL-Injection-Prevention A simple and quick way to check if your SQL Developer by Oracle is vulnerable to SQL Injection CVE-2023-3163, most commonly occurs when SQL Developer version 23.1.0. CVE-2023-21969 Exploit - SQL Developer Vulnerability Check Description This repository...

DevGuide

OWASP Foundation Developer Guide The Developer Guide is one of the original documents from OWASP and so has a long history. The original DevGuide repository has many of the previous versions going back to the very first version 1.0 release from 2002. This is the content for the Developer Guide...

CVE-2026-77578

CVE-2026-77578 — Xibo CMS Arbitrary Local File Read Overview CVE-2026-77578 is an authenticated Arbitrary Local File Read vulnerability in Xibo CMS. An authenticated user with Admin privileges or Module Templates access can import a crafted XML template containing a path-based asset with a...

CVE-2017-17562

CVE-2017-17562 not coded by me...

dvna

Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...

ImHex

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. /ˈɪmhɛks/ Supporting If you like my work, please consider supporting me on GitHub Sponsors, Ko-Fi or PayPal. Thanks a lot! Notable Sponsors | ---|--- | JetBrains, providing us with free All...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...

Azure-APIM-Dev-Portal-Signup-Bypass

A proof-of-concept script for bypassing a disabled developer portal signup on Azure API Management APIM by directly invoking the backend registration API. What it does Azure APIM developer portals can be configured to disable self-service signup through the portal UI. In some deployments the...