snoopysecurity Goto Github PK

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

brokencrystals

A Broken Application - Very Vulnerable!

browser-exploit-poc

byp-sop

🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️

chrome-sbx-db

A Collection of Chrome Sandbox Escape POCs/Exploits for learning

chromium-ipc-sniffer

A tool to capture communication between Chromium processes on Windows

chromium_bug_search

Simple commit search utility for Chromium Google Source.

computer-science

:mortar_board: Path to a free self-taught education in Computer Science!

csp-playground

CSP Playground for CVE-2021-30682

cve-2022-22978-poc

PoC of CVE-2022-22978 vulnerability in Spring Security framework

dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable.

dvws

Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities. NOTE: This project is out of date, please use https://github.com/snoopysecurity/dvws-node

dvws-node

Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

edge-vulnerability-reports

Security issues I've reported in Edge

exploit_playground

flowblot.net

FlowBlot is static code analysis benchmark project by Codethreat, including sink-source challenges grouped into various technical analysis concepts.

fullscreen-api-attack

Demo of phishing attack on the native HTML5 full screen API.

fuzzpayloads

Collection of fuzzing payloads and corpus from all around added as sub modules

go-fuzz-corpus

Corpus for github.com/dvyukov/go-fuzz examples

hackney

simple HTTP client in Erlang

i3-starterpack

A simple guide (and example of configuration) to install i3 & its and essentials packages, then make them look eye candy.

igoat-swift

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

jandroid

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

linux-kernel-exploitation

A bunch of links related to Linux kernel exploitation

lynx

A Node.js vulnerability finding tool.

noopener-burp-extension

Find Target="_blank" values within web pages that are set without 'noopener' and 'noreferrer' attributes

nopcommerce

The most popular open-source eCommerce shopping cart solution based on ASP.NET Core

nosqli

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.