mastg

OWASP移动应用安全测试指南（MASTG） OWASP移动应用安全测试指南（MASTG） 是一本针对移动应用安全测试和逆向工程的综合手册。它描述了验证OWASP移动安全弱点枚举（MASWE）中弱点的技术流程，这些弱点与OWASP移动应用验证标准（MASVS）中列出的控制项保持一致。 OWASP MAS: OWASP MASVS ➡ OWASP MASWE ➡ OWASP MASTG 🌐 访问MASTG网站 ✅ 获取最新的移动应用安全检查清单 ⚡ 贡献！ 💥 玩转我们的Crackmes 📞 联系我们 信赖方 OWASP MASVS、MASWE 和 MASTG...

3DSecure 2.0 3DS Authorization Challenge Cross Site Scripting

Product: 3DSecure 2.0 Manufacturer: Redsys Affected Versions: 3DSecure 2.0 3DS Authorization Challenge Tested Versions: 3DSecure 2.0 3DS Authorization Challenge Vulnerability Type: Cross-Site Scripting XSS Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17...

3DSecure 2.0 3DS Method Authentication Cross Site Scripting

Product: 3DSecure 2.0 Manufacturer: Redsys Affected Versions: 3DSecure 2.0 3DS Method Authentication Tested Versions: 3DSecure 2.0 3DS Method Authentication Vulnerability Type: Cross-Site Scripting XSS Risk Level: Medium Solution Status: Not yet fixed Manufacturer Notification: 2024-01-17 Solutio...

SpringBootVulExploit

This repository contains a collection of Spring Boot vulnerability exploit checklists, which are used for authorized testing and security research purposes. The repository includes various exploits and techniques for exploiting Spring Boot applications, including: 1. Spring Boot Vulnerability...

Stripo Inc: weak password poilicy in signup password leak to account takeover

Summary: add summary of the vulnerability i create account with weak password Steps To Reproduce: add details for how we can reproduce the issue 1.i create account with weak password qwerty123 2- account create done without validation 3- it should have protected users from attack and have policy...