broken-access-control

Here are 14 public repositories matching this topic...

sule01u / AutorizePro

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

ai authorization pentesting bugbounty vulnerability-detection burpsuite security-tools burp-extensions pentest-tool bounty-hunters idor unauthorized sdlc-tools bounty-hunting-tools broken-access-control llm idor-vulnerability unauthorized-access-tool

Updated Dec 12, 2024
Python

dub-flow / sessionprobe

Star

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

pentesting-tool broken-access-control

Updated Mar 28, 2024
Go

Chocapikk / CVE-2023-22515

Sponsor

Star

CVE-2023-22515: Confluence Broken Access Control Exploit

security exploit vulnerability infosec confluence privilege-escalation broken-access-control cve-2023-22515

Updated Oct 17, 2023
Python

AIex-3 / confluence-hack

Star

CVE-2023-22515

security exploit cybersecurity vulnerability confluence privilege-escalation remote-code-execution broken-access-control cve-2023-22515

Updated Nov 10, 2023
Java

dev-angelist / Web-Application-Penetration-Tester-WAPT-Notes

Star

Web Application Penetration Tester (WAPT) Notes

injection owasp webapp owasp-zap burpsuite owasp-top-10 injection-attacks webapplicationhacking wapt waptx broken-access-control portswigger-labs webapppentesting webapplicationsecurity webappplicationtesting webapppentest

Updated Nov 9, 2024

NullChapter / Challenges_2023_OWASP_10

Star

This repository contains OWASP Top 10 CTF challenges designed to test your skills in web application security. Each category includes both "easy" and "hard" challenges.

kubernetes crypto xml xss-vulnerability ssrf owasp-top-10 sql-injection-exploitation security-misconfiguration broken-access-control security-logging-and-monitoring vulnerable-and-outdated-components

Updated Nov 18, 2023
Python

abeker / OWASP-Top-10-Front

Star

Bachelor’s Work - WEB programming

security angular protection monitoring logging injection xss-vulnerability vulnerability-detection owasp-top-10 broken-authentication broken-access-control

Updated Sep 15, 2020
TypeScript

JacYuan1 / Insecure-Blog-Application-Project

Star

Fixing an Insecure Blog Application.

nginx php postgresql cybersecurity xss-vulnerability csrf-protection secure-software-development broken-access-control

Updated Apr 27, 2023
PHP

m3ssap0 / wordpress-jetpack-broken-access-control-vulnerable-application

Star

WARNING: This is a vulnerable application to test the exploit for the Jetpack < 13.9.1 broken access control (CVE-2024-9926). Run it at your own risk!

wordpress jetpack vulnerable-application broken-access-control cve-2024-9926

Updated Nov 9, 2024
Dockerfile

LittleHaku / cybersecurity-proj1

Star

Django website with intentional security flaws and their fixes to demonstrate vulnerabilities commonly found in web applications. Flaws include SQL injection, broken access control, SSRF, security misconfiguration, and CSRF.

django cybersecurity sql-injection csrf ssrf broken-access-control