OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
Repository Index
47,133 repositories indexed
1–17 of 17 · Most stars
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
- python
- python3
- python-3
- authentication
Oauth2 strategy for Google
- ruby
- omniauth
- google-oauth2
- oauth2
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
Sockets with pure VB6 impl of TLS encryption
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
Text-based logic question captcha's for Rails 🚫🤖
Middleware to Authenticate and Authorize Requests in Vapor
An Elixir library to sign and verify HTTP requests using AWS Signature V4
- aws-signature
- elixir-library
- authentication
Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study
- honeypot
- spring-boot
- tomcat
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.
An Elixir Plug to verify HTTP requests signed with AWS Signature V4
- elixir-plug
- aws-signature
- authentication