QRLJacking
owasp/qrljackingSocial engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…
exploit-frameworkspenetration-testingphishing+2
1.6k
owasp/qrljackingSocial engineering attack vector and exploitation framework for hijacking user sessions via QR code login, targeting web applications like WhatsApp,…
alienwithin/owasp-mth3l3m3nt-frameworkOWASP Mth3l3m3nt Framework is a penetration testing aiding tool and exploitation framework. It fosters a principle of attack the web using the web as…
owasp/fiasseA Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)
owasp/raiderOWASP Raider: a novel framework for manipulating the HTTP processes of persistent sessions
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
shoucheng3/perwendel__spark_cve-2016-9177_2-5-1Exploit for CVE-2016-9177 targeting Spark Java web framework, demonstrating directory traversal vulnerability in version 2.5.1 for security testing…
timothyjxhn/deliberatelyvulnerablewebappA Deliberately Vulnerable Web Application built on Struts 2 (CVE-2017-5638) and Log4J (CVE-2021-44228) for testing and demonstration of OWASP Top 10…
kaisonox/apiscopeAn API hooking framework for intercepting and monitoring Windows applications
loneyers/spring4shellSpring4Shell , Spring Framework RCE (CVE-2022-22965) , Burpsuite Plugin
owasp/redteamtoolkitThe WASM Based Security Toolkit for the Web First Paradigm
owtf/owtfModular penetration testing framework integrating multiple tools for automated web application security assessment, aligned with OWASP Testing Guide,…
factionsecurity/factionPen Test Report Generation and Assessment Collaboration
purpleteam-labs/purpleteam-orchestratorOrchestration component of purpleteam
sarthak4126/web-app-pentestingWeb application penetration testing lab — vulnerable Flask app, automated scanner, and professional pentest report. Covers OWASP Top 10, SQLi, XSS,…
dipakpanchal05/cve-2022-23808Proof-of-concept exploit for CVE-2022-23808, a stored XSS vulnerability in phpMyAdmin 5.1.1 setup script, with payload and reproduction steps for…
klairmanraj/multi-vlan-enterprise-network-vulnerability-assessmentMulti-VLAN enterprise network vulnerability assessment using Nessus, OWASP ZAP, and Wireshark. Confirms Stored XSS on WebGoat and EternalBlue…
boku7/cve-2020-23839Public PoC Disclosure for CVE-2020-23839 - GetSimple CMS v3.3.16 suffers from a Reflected XSS on the Admin Login Portal
daytriftnewgen/cve-2026-21876Proof-of-concept exploit for CVE-2026-21876 demonstrating multipart charset bypass of OWASP CRS WAF in Flask, ASP.NET, and Spring Boot applications.