渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

JAVA 漏洞靶场 (Vulnerability Environment For Java)

In progress rough solutions to bWAPP / bee-box

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

CVE-2018-20377; 20575; 20576; 20577 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.

网络安全训练营全部资料，包括 Web 安全、网络安全、信息安全、系统防护、攻防渗透、云安全

Simple API for storing all incoming XSS requests and various XSS templates.

Chinese etymology research website. ASP.NET Core architecture for SPA. See http://hanziyuan.net or http://ChineseEtymology.org

JSON CSRF PoC

An unsecure by-design PWA that students can analyse with a suite of tools and support to build their understanding of web-based secure software architecture.

Node Js - Node-JS-Full-Security-Implementation-Project Node js full security implementation project using EJS view engine Topics Covered Security: Crypto - Encryption/Decryption Helmet Js for handle security like xssFilter | noSniff | noCache | hpkp | frameguard Etc. CORS - Cross-Origin Resource Sharing CSRF Token HTTPS Topics Covered Basic: PDF…

Performing various Cyberattacks on a vulnerable website.

Two very simple demos about CSRF involving access and refresh tokens written in JS with Node.js

RCE exploit for low privileged user via CSRF in open-webui

Exploring web security through XSS, CSRF, SQL injection, password breaking and database encryption using API method

Security in Single Page Applications

A deliberately vulnerable web application built with Node.js, Express, and MySQL for security training. It provides a safe environment to learn about and exploit common web vulnerabilities like SQL Injection, XSS, CSRF, SSRF, and OS Command Injection.

Supports comments and images. Admin can edit and delete. Easy automatic install. SQLite or MySQL db.

OWASP CSRFProtector Project Landing Page

WordPress Pentesting