Express CSRF token middleware with "Double cookie submit" - doochik/express-csrf-double-submit-cookie

xss-payloads. Contribute to cigboeke/xss-payloads development by creating an account on GitHub.

Hex extension for burp. Contribute to nikaiw/hextraview development by creating an account on GitHub.

I built and documented hands-on cybersecurity projects focused on SOC operations, detection engineering, and threat analysis, including investigation of SQL injection, XSS, DoS, and zero-day RCE at...

A lightweight web-based HTTP proxy and pentest toolkit - GitHub - t-dpz/BurpLite: A lightweight web-based HTTP proxy and pentest toolkit

Challenge for Interview. Contribute to BergerFrederik/Hotel-eXXellent development by creating an account on GitHub.

Gurpreet Singh - Offensive Security Labs: 150+ web application penetration testing labs | Authentication bypass, SQL injection, XSS, CSRF | Burp Suite Professional | Python, Linux, Bash - Gurpreet-...

multiplare with real time data flow (Socket.io), cashed with redis, security- csrf cookies + token for varification - GitHub - klaus-0-0/Game-TS: multiplare with real time data flow (Socket.io), c...

The PoC of CVE-2025-70795 and its update. Contribute to ANYLNK/STProcessMonitorBYOVD development by creating an account on GitHub.

A Python-based web vulnerability scanner that detects SQL Injection, XSS, missing security headers, and common directories. - anweshsingh34-arch/web-application-vulnerability-scanner

Contribute to rootdirective-sec/CVE-2026-23744-Lab development by creating an account on GitHub.

🚀 Discover and navigate security vulnerabilities in software with ExploitMaze, your tool for efficient and effective exploitation analysis. - Ahegaho/ExploitMaze

APA即AutoPentestAI 是由APA安全团队开发的一款由大语言模型（LLM）驱动的自动化渗透测试框架。它结合了现代 AI 技术（RAG、ReAct）与传统安全工具，能够按照标准的渗透测试流程（信息收集 -> 漏洞探测 -> 漏洞利用 -> 权限维持 -> 横向移动）自动执行任务。 - JXJZJWHCM/AutoPentestAI

Application Node.js/Express intentionnellement vulnérable pour la formation cybersécurité. Inclut SQL Injection, Command Injection, SSRF, XSS, JWT Bypass et plus. Interface moderne avec documentati...

LLM赋能的内存漏洞可利用性判定. Contribute to zp9080/llm4vea development by creating an account on GitHub.

Advanced Windows Threat Hunting Lab: End-to-end detection of LSASS Credential Dumping, Parent PID Spoofing, and DLL Side-Loading (.NET) using Wazuh SIEM & Sysmon custom rules - phuongtech24...

Contribute to b1gchoi/CVE-2026-2441_POC development by creating an account on GitHub.

The source code used to demonstrate the proposed mutation operators for CSRF and IPL was evaluated on the security functions of DVWA - arasyid10/IPL_CSRF_DVWA_Mutation

A Web Vulnerability Scanner is a security tool designed to automatically detect common vulnerabilities in web applications. This project scans web targets to identify security weaknesses such as SQ...

This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stage...