OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
- python
- python3
- python-3
- authentication
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
- tokenization
- web-security
- compliance
- security
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒
- csrf-protection
- gorilla
- middleware
- golang
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
- readme
- documentation
- docs
- docs-generator
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
a socket mock framework - for all kinds of socket animals, web-clients included
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
- padding-oracle
- aes
- decryption
- encryption
Sockets with pure VB6 impl of TLS encryption
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
GoDoc Live statically analyzes your Go HTTP services — extracts route definitions, request/response contracts, and authentication patterns — then generates beautiful, interactive API documentation.
- docs
- documentation
- documentation-generator
- golang
An HTTP client library (not only) for MicroPython with an API similar to requests
A micro HTTP Web client for MicroPython (used on Pycom modules & ESP32)
- micropython
- esp32
- pycom
- web-client
Middleware to Authenticate and Authorize Requests in Vapor
An Elixir library to sign and verify HTTP requests using AWS Signature V4
- aws-signature
- elixir-library
- authentication
Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study
- honeypot
- spring-boot
- tomcat
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.
An Elixir Plug to verify HTTP requests signed with AWS Signature V4
- elixir-plug
- aws-signature
- authentication