A Laravel package to scrub sensitive information that breaks operational security policies from being leaked on accident or not by developers.

Subscan is a simple tool for subdomain scanner, it can scan subdomains fast.

Website for testing and preventing different attacks like XSS, SQL Injection & Spoofing for Nasscom (ISAA) Project.

Challenges of the alpha ctf 2022

PHP DDoS/Stress Test

Vulnerable Web application made with PHP/SQL designed to help new web testers gain some experience and test DAST tools for identifying web vulnerabilities. Containing some of the most well-known vulnerabilities such as SQL, cross-site scripting (XSS), OS command injections, our intention to expand more vulnerabilities for learning purposes.

blake2b & md5 based registration and login in PHP to show a secure hashed password.

Self-deployed Straight-forward hacking lab machine which designed for new comer who want to learn Penetration Testing field that running inside Docker for easy setup.

A side note about LFI and Leaking the php source of some sites

Abertay Univesity 3rd Year Ethical Hacking Professional Project. Work performed by EH9 Team

Exploit mail function in php when admin disabled other functions like shell. Uses LD_PRELOAD

A simple Vulnerable Web-App for Classroom Training.

This small PHP scripts detects IP address whether from it's protected by web proxy or other methods. It reveals original IP address and finds access from which IP address and from which browser.

🌐🔒 Evaluating the security (exploiting and fixing vulnerabilities) of Open eClass 2.3 (University of Athens) platform.

Secure Bharat is a website presented at Smart India Hackathon 2017. It aimed at providing Awareness about Cyber Security to everybody in India.

Praktek eksploitasi service jaringan komputer dengan vulnerable machine metasploitable 2

This is a cyber security university assignment which is consisted of two phases. On the first phase, students seperated in teams, must find and patch security vulnerabilities of an old eClass version on a 4-week period. On the second phase, all teams had to attack the patched eClass version of the other teams.

Instagram phishing (White Hat) tool using Apache and PHP. Note that this project is only for education purposes