Source code for Hacker101.com - a free online web and mobile security class.
-
Updated
Jun 14, 2020 - CSS
Source code for Hacker101.com - a free online web and mobile security class.
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
A list of resources for those interested in getting started in bug bounties
Awesome XSS stuff
Web Application Security Scanner Framework
Git All the Payloads! A collection of web attack payloads.
基于SpringCloud(Hoxton.SR3) + SpringBoot(2.2.6.RELEASE) 的SaaS 微服务脚手架,具有统一授权、认证后台管理系统,其中包含具备用户管理、资源权限管理、网关API、分布式事务、大文件断点分片续传等多个模块,支持多业务系统并行开发,可以作为后端服务的开发脚手架。代码简洁,架构清晰,适合学习和直接项目中使用。核心技术采用Nacos、Fegin、Ribbon、Zuul、Hystrix、JWT Token、Mybatis、SpringBoot、Redis、RibbitMQ等主要框架和中间件。
XSS'OR - Hack with JavaScript.
https://staticcheck.io/docs/checks#SA6005
In file sanitize.go: if strings.ToLower(straw) == strings.ToLower(needle) { should be strings.EqualsFold(straw, needle)
or, even better, compile a regexp literal for needle and use it for the entire loop.
A container repository for my public web hacks!
Collection of quality safety articles
pentest framework
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
渗透测试有关的POC、EXP、脚本、提权、小工具等,欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
Janusec Application Gateway, an application security solution which provides WAF (Web Application Firewall), CC attack defense, LDAP or OAuth2 Authentication, private key protection, Web SSH operation, Web routing and scalable load balancing. JANUSEC应用网关,提供WAF、CC攻击防御、LDAP或OAuth2身份认证、统一Web化管理入口、证书私钥保护、Web SSH安全运维,Web路由以及可扩展的负载均衡等功能。
Advanced dork Search & Mass Exploit Scanner
The table on the main README is pretty outdated.
It'd be great if someone could update it.
Adding a few entries from the repo to the table is already a valuable help
😈
Hello,
I'm migrating one old project from Nette 2.2-dev to 2.4 and i've realized that new latte doesn't support "AND" keyword in if condition. I can't find any reason why it was removed. Documentation says "Conditions behave exactly the same way as their PHP counterparts". Modify all templates to use "&&" was pain an
the json example in the readme has no self in various params but the json file from the tests does have these set.
https://github.com/paragonie/csp-builder#example
https://github.com/paragonie/csp-builder/blob/e9a7560fd3f133a85f03c51de5fc051ac97630a7/test/vectors/basic-csp.json
for example i am guessing that using the example from the readme does not set self fore base-uri. but that might n
Add a description, image, and links to the xss topic page so that developers can more easily learn about it.
To associate your repository with the xss topic, visit your repo's landing page and select "manage topics."
Thanks for this great project! I haven't tried it myself yet but it seems like a well-documented and mature tool to start using -- and it's under a year old!
I was wondering if you thought about creating a documentation site for the project. This could make people think it's more professional and help attract more users from commercial tools.
One idea is to use Mkdocs with a theme like Mkdoc