15900 matches found
CRM Platform SQL Injection
The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
Strutshock
Strutshock Usage strutshock http://example.com/index.action...
NGWAF
N3XT-G3N Web App Firewall NGWAF NGWAF is created by@yupengfei, @zhangbosen, @matthewng and @elizabethlim. Special shoutout to@ruinahkoh for her contributions to the initial stages of NGWAF. NGWAF is an experimental proof of concept and not ready for production use in its current form. Contents 1...
Check Risk WAF
Check Risk WAF Π ΠΎΡΡΠΈΠΉΡΠΊΠΎΠ΅ ΠΊΠΎΠΌΠΏΠ»Π΅ΠΊΡΠ½ΠΎΠ΅ ΡΠ΅ΡΠ΅Π½ΠΈΠ΅ Π΄Π»Ρ Π·Π°ΡΠΈΡΡ Π²Π΅Π±-ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΠΉ ΠΈ ΠΈΠ½ΡΡΠ°ΡΡΡΡΠΊΡΡΡΡ WAF, Anti-Bot, Anti-DDoS ΠΈ AI-ΠΏΠΎΠΌΠΎΡΠ½ΠΈΠΊ. Π ΠΎΠ±Π»Π°ΠΊΠ΅ Check Risk ΠΈΠ»ΠΈ Π½Π° Π²Π°ΡΠ΅ΠΌ ΡΠ΅ΡΠ²Π΅ΡΠ΅. ΠΠΊΠ»ΡΡΡΠ½ Π² ΡΠ΅Π΅ΡΡΡ ΡΠΎΡΡΠΈΠΉΡΠΊΠΎΠ³ΠΎ ΠΠ ΠΠΈΠ½ΡΠΈΡΡΡ Π ΠΎΡΡΠΈΠΈ. Π Π΅Π΅ΡΡΡΠΎΠ²Π°Ρ Π·Π°ΠΏΠΈΡΡ β32239 ΠΎΡ 17.02.2026 Π‘Π°ΠΉΡ Β· ΠΠΎΠΊΡΠΌΠ΅Π½ΡΠ°ΡΠΈΡ Β· ΠΠ°ΡΠΈΡΠ° Β·...
wafaray
Enhance your malware detection with WAF + YARA WAFARAY WAFARAY is a LAB deployment based on Debian 11.3.0 stable x64 made and cooked between two main ingredients WAF + YARA to detect malicious files e.g. webshells, virus, malware, binaries typically through web functions upload files. -blue.svg...
carina
About Carina Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compos...
CVE-2018-14667
CVE-2018-14667 After spending many time to understand and correctly exploit this CVE, I decided to build a repo on the RichFaces 3.X RCE bug and share the HOWTOs step by step with the community. 0x00 : Introduction on RichFaces 3.X bug On Monday, November 19, Joao F M Figueiredo published a well...
CyberChef
CyberChef The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR and Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps,...
ninjasworkout
Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution β 1 No SQL Injection β 2 Cross site Scripting β 3 Broken Access Control β 4 Broken Session Management β 5 We...
SpoofcheckSelfTest
SpoofCheck Self Test Web application that lets you test if your domain is vulnerable to email spoofing. NOTE: This application is still in development. Installation: This application is designed to be used as a service. However, if you want to host this yourself, do the following: git clone...
CVE-2020-8193
CVE-2020-8193...
feroxbuster
!WARNING Security Notice β Domain Impersonation The domain feroxbuster.com is NOT affiliated with this project, its maintainers, or any official feroxbuster releases. Official feroxbuster downloads are distributed ONLY through: https://github.com/epi052/feroxbuster open source...
WebGoat
WebGoat: A deliberately insecure Web Application Introduction WebGoat is a deliberately insecure web application maintained by OWASP designed to teach web application security lessons. This program is a demonstration of common server-side application flaws. The exercises are intended to be used b...
coraza
Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...
SecurityShepherd
OWASP Security Shepherd The OWASP Security Shepherd Project is a web and mobile application security training platform. Security Shepherd has been designed to foster and improve security awareness among a varied skill-set demographic. The aim of this project is to take AppSec novices or experienc...
Pegasus-Pentest-Arsenal
Pegasus Pentest Arsenal PPA /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|/,/,/,/,/,/,/,/| βββββββ ββββββββ βββββββ ββββββ...
log4shellwithlog4j2_13_3
log4shellwithlog4j2133 Springboot web application accepts a name get parameter and logs its value to log4j2. Vulnerable to CVE-2021-44228. build the Springboot vulnerable application with mvn clean install run the Springboot application with the k2 agent with java --add-modules java.sql...
solar-exploiting-log4j
π₯ Solar Exploiting Log4j - TryHackMe Walkthrough π Room: Solar Exploiting Log4j Platform: TryHackMe Difficulty: Medium Topic: Log4Shell Log4j Vulnerability π§ Objective Exploit the Log4j vulnerability CVE-2021-44228 to gain remote code execution and capture flags. π οΈ Tools Used Nmap Burp Suite cURL...
OpenHunterAI
OpenHunterAI Your local AI red team. Attacker-style reasoning for web, API, and LLM application security. Project website Β· Quick start Β· Agent skill Β· Assessment model Β· Architecture Β· Docs Β· Star history OpenHunterAI brings scope, scan activity, findings, and remediation into one local workspac...
SafeLine
SafeLine - Make your web apps secure π Website | π Docs | π Live Demo | πββοΈ Discord | δΈζη π Achievements π INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and...