Translated✨ An open-source, free, one-stop Java permission authentication framework that makes authentication and authorization simple and elegant! — Login authentication, permission authentication, distributed Session, microservice gateway authentication, SSO single sign-on, OAuth2.0 unified authentication, jwt integration, API Key authorization, API parameter signing
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework
HTTP Session Management for Go
MongoDB session store for Express
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
A library for implementing authentication/authorization in Ember.js applications.
Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!
Fullstack authentication and accounts-management for Javascript.
Simple promise-based session middleware for Next.js, micro, Express, and more
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
🍍Jeff provides the simplest way to manage web sessions in Go.
- golang
- sessions
- http
- session-management
This is quick session for net/http in golang. This package is perhaps the best implementation of the session mechanism, at least it tries to become one.
:hammer: A multiple reverse shell session/client manager via terminal
- socket
- python
- ctf
- attack-defense
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Straightforward HTTP session management
- session-management
- session
- http
- golang
Go session management for web servers (including support for Google App Engine - GAE).
- gae
- http-session
- session-management
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
- cve-2026-109618
- cve-2026-109619
- exploit
- memory-corruption
Rails compatible Plug session store
A dead simple, highly performant, highly customizable sessions middleware for go http servers.
Handles sessions for Ruby web applications using DynamoDB as a backend.
Powerful Session Management for Kemal applications
Beaker sessioning bindings for Pyramid