Mr-xn / Penetration_Testing_POC
ζΈιζ΅θ―ζε ³ηPOCγEXPγθζ¬γζζγε°ε·₯ε ·η---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
reddelexc / hackerone-reports
Top disclosed reports from HackerOne
jonaslejon / malicious-pdf
π Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh
chr0nzz / traefik-manager
A clean, self-hosted web UI for managing your Traefik reverse proxy.
pallets-eco / flask-wtf
Simple integration of Flask and WTForms, including CSRF, file upload and Recaptcha integration.
pipelab-org / pipelock
Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action receipts: verifiable audit evidence from outside the agent.
osrf / docker_images
A repository to hold definitions of docker images maintained by OSRF
osrf / rocker
A tool to run docker containers with overlays and convenient options for things like GUIs etc.
ch4mpy / spring-addons
OAuth2 / OIDC for Spring backends of SPAs and mobile apps: the Spring Security beans the official starters leave to you (authorities, CORS, 2xx/401 for fetch, CSRF cookie, validated redirects, logout, one refresh flow at a time), as properties.
GeoStat-Framework / GSTools
GSTools - A geostatistical toolbox: random fields, variogram estimation, covariance models, kriging and much more
tuwukee / jwt_sessions
XSS/CSRF safe JWT auth designed for SPA
feiyuaq / zcfsrf
Z欑ζΉθΎε ₯ζ³οΌζεεζΆε¦δΉ θ±θ―οΌ
eldarshiraliyev / BugScanner
π Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
Jeng-linLi / student-absence-system
SAAS v0.2.0 β Student Absence & Academic Accommodation System: Flask+SQLite prototype (two-level approval, CSRF, attachment access control, 49-check CI), enterprise design package for HKUST(GZ), and Individual Ideation assignment
armourinfosec / Offensive-Web-Application-Security
A lab-driven course on breaking web applications and explaining how to fix them β 491 notes, 36 reproducible labs, mapped to OWASP WSTG and the PortSwigger Top 10 Web Hacking Techniques.
mhmtsrfglu / superwiki
Agent skills that turn docs/ into an LLM-maintained wiki and task tracker. Obsidian-friendly. Works with Claude Code, Codex and Copilot CLI.
m0m0x01d / strata
See why a web vulnerability works, not just how to trigger it β a single-file, zero-dependency security lab that renders a vulnerable app as a 7-layer cross-section. 17 labs, attacker & defender modes, AI-authorable.