6603 matches found
Owasp-top-10-k8s-2025
OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...
pygoat
PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation From Sources Docker Container Installation Video Uninstallation Solutions For Developers...
dvna
Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...
DNSrecon-gui
My website: https://microjoan.com My blog: https://darkhacking.es/ Buy me a coffee: https://www.buymeacoffee.com/microjoan DISCLAIMER This toolkit contains materials that can be potentially damaging or dangerous for social media. Refer to the laws in your province/country before accessing, using,...
GCPGoat
GCPGoat : A Damn Vulnerable GCP Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...
OFFAT
OWASP OFFAT OWASP OFFAT OFFensive Api Tester is created to automatically test API for common vulnerabilities after generating tests from openapi specification file. It provides feature to automatically fuzz inputs and use user provided inputs during tests specified via YAML config file. Demo Note...
rapidscan
🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...
agent-governance-toolkit
🌍 English | 日本語 | 简体中文 | 한국어 Agent Governance Toolkit Ship agents to production without losing sleep 🚀Quick Start · 📋 Specifications · 📦 PyPI · 📝 Changelog !IMPORTANT Public Preview -- production-quality public preview releases. May have breaking changes before GA. Policy enforcement, identity,...
Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
Penetration Testing, Beginners To Expert! This guide is designed for both beginners and experienced penetration testers. It covers all aspects of web application penetration testing, including foundational concepts, setting up testing environments with tools such as Burp Suite and bWAPP, and...
VAmPI
VAmPI The Vulnerable API Based on OpenAPI 3 VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency of tools used to detect security issues in APIs. It includes...
AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...
API-Security
OWASP API Security Top 10 This project is designed to address the ever-increasing number of organizations that are deploying potentially sensitive APIs as part of their software offerings. These APIs are used for internal tasks and to interface with third parties. Unfortunately, many APIs do not...
hate_crack
root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...
quantum-security-project
OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...
metlo
Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...
www-project-top-10-for-large-language-model-applications
www-project-top-10-for-large-language-model-applications OWASP Foundation Web Repository OWASP Top 10 for Large Language Model Applications...
Top10
十大 官方 OWASP 十大文档仓库 OWASP 十大 2025 - 已发布 我们已发布 OWASP 十大：2025（最终版）： OWASP 十大：2025 请在此处提交任何反馈、评论或问题。 OWASP 十大 2021 - 已取代 OWASP 十大：2021 OWASP 十大 2017 - 历史版本 OWASP 十大：2017 PPTX OWASP 十大：2017 PDF OWASP 十大领导团队 目前 OWASP 十大共有五位联合负责人： Andrew van der Stock - X：@vanderaj Brian Glas - X：@infosecdad Neil...
CVE-2024-10673
🔥 概述 该脚本利用 CVE-2024-10673 ，这是 Top Store WordPress 主题（ = 1.5.4） 中发现的一个严重漏洞。该漏洞允许拥有订阅者（subscriber）级别或更高权限的已认证用户 通过未受保护的 AJAX 请求安装和激活任意插件。 ⚠️ 严重性与影响 无需管理员认证的插件安装 ：拥有订阅者权限 的攻击者无需管理员批准即可安装插件。 远程代码执行（RCE）可能性 ：如果安装了恶意插件，攻击者可能执行任意代码。 权限提升 ：攻击者可以安装授予其管理访问权限的插件。 🛠️ 此 Exploit 的功能 自动化攻击 ：动态提取所需的 nonce。 支持插件选择...