awesome-web-hacking

awesome-web-hacking 此列表面向任何希望学习 Web 应用程序安全但不知从何入手的人。 您可以通过发送 Pull Request 来添加更多信息。 如果您不想提交 PR，可以在 Twitter 上通过 @infoslack 联系我。 目录 书籍 文档 工具 速查表 Docker 漏洞 课程 在线黑客演示站点 实验室 SSL Ruby on Rails 安全 书籍 http://www.amazon.com/The-Web-Application-Hackers-Handbook/dp/8126533404/ 《Web 应用程序黑客手册：发现与利用安全漏洞》...

Pegasus-Pentest-Arsenal

Pegasus Pentest Arsenal PPA /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|,/,/,/,/,/,/,/| ██████╗ ███████╗ ██████╗ █████╗...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

wvctf

WebVulnCTF WVCTF 或 WebVulnCTF 是一个游戏化的网络平台，以娱乐的方式促进渗透测试和 Web 应用开发安全培训。通过奖励系统，用户必须在存在漏洞的应用中搜索一组标志，这些标志对应着 Web 应用中常见的漏洞。 更多信息请访问官方网站：https://repojfm.github.io/wvctf/ 构建与部署 要求： Java 8 JDK（建议 jdk1.8.0251 或更新版本） Apache Maven 3.6.3 Node v12（建议 v12.16.2）及 NPM 6.14.x PostgreSQL（推荐...

dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

w3af

w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...

Firefox-Security-Toolkit

Firefox Security Toolkit 一款将 Firefox 浏览器转变为渗透测试套件的工具 原理 它下载最重要的扩展，并将其安装到你的浏览器中。所使用的扩展是通过对信息安全社区进行调研后筛选出的。基于调研结果， Firefox Security Toolkit 应运而生。此外，它还允许你下载 Burp Suite 证书以及用于 User-Agent Switcher 的大型用户代理列表。只需一键即可准备你的 Web 应用测试浏览器。 它与知名项目（如 OWASP Mantra 和 Hcon STF ）有何不同？ OWASP Mantra 和 Hcon STF...

jsfinder

Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...

Interview_Tips

Consejos para entrevistas Seguridad de la Información Esta página es un resumen de las entrevistas por las que he pasado; cubrí una variedad considerable de roles, recibí múltiples rechazos, pero aprendí de cada entrevista, recopilé comentarios constructivos y seguí adelante. Espero que estas...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...

Apache Tomcat Examples Web Application - Cross-Site Scripting

Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...

AutoRepeater

AutoRepeater：使用 Burp Suite 自动重放 HTTP 请求 摘要 在 Extender 中导入 AutoRepeater.jar 简要说明 AutoRepeater 只会重发被已定义替换修改过的请求。当 AutoRepeater 收到与某个标签页所设条件匹配的请求时，它会先将所有已定义的基础替换应用到该请求，然后针对每个已定义的替换，复制已执行基础替换的请求，并将给定的替换应用于该请求。 简介 Burp Suite 是一个拦截型 HTTP 代理，也是执行 Web 应用安全测试的事实标准工具。虽然 Burp Suite...

CVE-2025-55182_Vulnerable-Application

CVE-2025-55182 脆弱性实验室 使用易受攻击的 React 服务器组件来演示现代 Web 框架中安全漏洞的教育测试实验室。 ⚠️ 重要免责声明 此应用程序有意包含漏洞，仅应在受控环境中用于教育目的。请勿在生产环境中使用或将其暴露于公共互联网。 🎯 目的 此实验室演示了影响 React 服务器组件的漏洞 CVE-2025-55182。它提供了一个安全的环境，用于： 安全研究人员研究该漏洞 开发人员理解安全隐患 学生学习 Web 应用程序安全 渗透测试人员练习检测技术 🛠️ 技术栈 框架 : Next.js 15.0.4 React : 19.1.0 React 服务器组件 :...

CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-46581

In Eclipse Mojarra versions 2.3 and following, URL handing in DefaultFaceletFactory does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal request, with the privileges of the target...

offensive-security-labs

Offensive Security Labs A collection of hands-on offensive cy...

React Router: Open redirect leading to XSS

Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors...

wger: Privilege escalation via trainer-login session chaining allows gym trainer to impersonate gym manager

SummaryA gym trainer can escalate their session to any higher-privileged account gym manager, general manager by chaining two calls to the trainer-login endpoint. Once a trainer performs a legitimate switch into a low-privileged user, the session flag trainer.identityis set and this flag alone...

CVE-2026-10857 Reflected XSS in Akinsoft's e-Commerce

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. E-Commerce allows Reflected XSS. This issue affects e-Commerce: before 1.25.01.06...