wewe
Uncover the true IP address of websites safeguarded by Cloudflare & Others
Achieving a Reverse Shell Exploit for Apache ActiveMQ (CVE_2023-46604)
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Automation's Ignition software.
The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.
A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles
Differential testing framework for HTTP implementations
A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities
Microsoft 365 & Microsoft Graph Library for Python
A simple python library to interact with Microsoft Graph and Office 365 API
A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.
Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.
Burp Plugin to Bypass WAFs through the insertion of Junk Data
Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
DNTCaptcha.Core is a captcha generator and validator for ASP.NET Core applications
Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automa…