Quick-and-dirty authentication placeholder I can drop into various hobby project until they get real auth.

A deliberately insecure Java web application

A toy webserver written in Rust / 合肥工业大学 2023 计算机网络课程设计

Half-Life Advanced Effects (HLAE) is a tool to enrich Source (mainly CS:GO) engine based movie making. However, the main branch prevents users from injecting without the insecure parameter, which this fork allows.

A threat actor may tamper with a stream that gets deserialized on the target, causing the target to access data or perform non-intended actions

A simple image hosting service powered by Actix-web / 基于Actix-web的简易图床服务

chunkHide provides a convenient way to manipulate PNG image files by adding, modifying, or reading text chunks. It is particularly useful for scenarios where you need to embed metadata or other textual information within a PNG image.

Part of my bad NodeJS Series. An insecure NodeJS 'API' server written for security experiments and demonstrations

This is a proof of concept script I put together that exploits the default credentials of exposed Megapixel IP Cameras.

Security Warning: This app allows execution of arbitrary commands which can be used to compromise your system

k2345 安全 - Koishi 2345 Security: 保护您的 Koishi 不受侵害(确信)

书籍销售管理系统 Vue前端

Simple PasswordManager written using Go and Svelte. Its simple and insecure and it was created as part of a college assignment.

source code for mitm.cool, a dead-simple site that doesn't have SSL... allowing public WiFi to MITM the request and get you authenticated

A whole lot of fail going on. Nothing goes right here, anything that can go wrong does.

This code is the demonstration of using path traversal to exploit a poorly coded upload file fuction for malicious code injection on to a web server.

A springboot secure web app with thymeleaf support.

A springboot secure web app with thymeleaf support.

A springboot secure web app with jsp support.

A springboot secure web app with jsp support.