1348 matches found
tachyon
Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...
wvctf
WebVulnCTF WVCTF o WebVulnCTF es una plataforma web gamificada que promueve la formación en pentesting y seguridad en el desarrollo de aplicaciones web de forma entretenida. A través de un sistema de recompensas, el usuario debe buscar un conjunto de flags en la aplicación vulnerable, que...
OpenCATS 0.9.6 - Cross-Site Scripting
OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...
Apache Tomcat Examples Web Application - Cross-Site Scripting
Apache Tomcat 8.5.50 to 8.5.81, 9.0.30 to 9.0.64, 10.0.0-M1 to 10.0.22, and 10.1.0-M1 to 10.1.0-M16 contain a reflected cross-site scripting caused by displaying unfiltered user data in the Form authentication example, letting attackers execute scripts in victim browsers, exploit requires attacke...
Pegasus-Pentest-Arsenal
Pegasus Pentest Arsenal PPA root@kitploit: /\ / | / \ | \ | || | | | | / | /| |/ |/ |/ ,/; ; ; ,'/|; ,/,/, ,'/ |;/,/,/,/| ,/; |;|/,/,/,/,/| ,/'; |;|,/,/,/,/,/| ,/'; |;|/,/,/,/,/,/|, / ; |;|,/,/,/,/,/,/| / ,'; |;|/,/,/,/,/,/,/| /,/'; |;|,/,/,/,/,/,/,/| /;/ '; |;|,/,/,/,/,/,/,/| ██████╗ ███████╗...
jsfinder
Features | Installation | Usage | Demo | TODOs| Contact jsFinder is a command-line tool written in Go that scans web pages to find JavaScript files linked in the HTML source code. It searches for any attribute that can contain a JavaScript file e.g., src, href, data-main, etc. and extracts the UR...
dawnscanner
Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...
0l4bs
0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : root@kitploit: Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 |...
Firefox-Security-Toolkit
Firefox Security Toolkit A tool that transforms Firefox browsers into a penetration testing suite How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information security community. Based on it's results, Firef...
w3af
w3af - Web Application Attack and Audit Framework w3af is an open source web application security scanner which helps developers and penetration testers identify and exploit vulnerabilities in their web applications. The scanner is able to identify 200+ vulnerabilities, including Cross-Site...
Interview_Tips
Consejos para entrevistas Seguridad de la Información Esta página es un resumen de las entrevistas por las que he pasado; cubrí una variedad considerable de roles, recibí múltiples rechazos, pero aprendí de cada entrevista, recopilé comentarios constructivos y seguí adelante. Espero que estas...
ruby-advisory-db
Ruby Advisory Database The Ruby Advisory Database is a community effort to compile all security advisories that are relevant to Ruby libraries. We expect others to create the data, such as getting CVE's, GHSA's, OSVDB's, cvss', or original vulnerability information. More details at HERE. You can...
AutoRepeater
AutoRepeater: Repetición automatizada de peticiones HTTP con Burp Suite tl;dr Dentro del extensor, importa AutoRepeater.jar Algunas breves instrucciones AutoRepeater solo reenviará las peticiones que hayan sido modificadas por una sustitución definida. Cuando AutoRepeater recibe una petición que...
CVE-2025-55182_Vulnerable-Application
ES Module Lexer A JS module syntax lexer used in es-module-shims. Outputs the list of exports and locations of import specifiers, including dynamic import and import meta handling. Supports new syntax features including import attributes and source phase imports. A very small single JS file 4KiB...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-46581
In Eclipse Mojarra versions 2.3 and following, URL handing in DefaultFaceletFactory does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal request, with the privileges of the target...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
React Router: Open redirect leading to XSS
Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external location or XSS vectors...
CVE-2026-10857 Reflected XSS in Akinsoft's e-Commerce
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. E-Commerce allows Reflected XSS. This issue affects e-Commerce: before 1.25.01.06...