渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

JAVA 漏洞靶场 (Vulnerability Environment For Java)

In progress rough solutions to bWAPP / bee-box

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

CVE-2018-20377; 20575; 20576; 20577 Multiple security vulnerabilities affecting latest firmware release on ORANGE Livebox modems.

Simple API for storing all incoming XSS requests.

JSON CSRF PoC

Chinese etymology research website. ASP.NET Core architecture for SPA. See http://hanziyuan.net or http://ChineseEtymology.org

网络安全训练营全部资料，包括 Web 安全、网络安全、信息安全、系统防护、攻防渗透、云安全

Node Js - Node-JS-Full-Security-Implementation-Project Node js full security implementation project using EJS view engine Topics Covered Security: Crypto - Encryption/Decryption Helmet Js for handle security like xssFilter | noSniff | noCache | hpkp | frameguard Etc. CORS - Cross-Origin Resource Sharing CSRF Token HTTPS Topics Covered Basic: PDF…

Performing various Cyberattacks on a vulnerable website.

Two very simple demos about CSRF involving access and refresh tokens written in JS with Node.js

Security in Single Page Applications

Supports comments and images. Admin can edit and delete. Easy automatic install. SQLite or MySQL db.

Recurse Center presentation on how to secure web applications

WordPress Pentesting

2014 - Testado em sites de MU Online

OWASP CSRFProtector Project Landing Page

Cross-site Request Forgery Demonstration using Vulnerable Django Backend

Exploring web security through XSS, CSRF, SQL injection, password breaking and database encryption using API method