OWASP Joomla vulnerability scanner. Detects Joomla version, components, modules, and templates with known vulnerabilities. Checks for common…
OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/
jQuery with XSS, Testing and Secure Version
JSSCM detects expired domains for Stored XSS exploitation during browsing.
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
Non-official write up for the Juice-Shop CTF
Toolkit for testing, tampering, and forging JSON Web Tokens. Tests common JWT vulnerabilities including algorithm confusion (alg:none, RS256…
Simple HS256, HS384 & HS512 JWT token brute force cracker.
Security Testing Scripts for JWT
A CPU-based JSON Web Token (JWT) cracker and - to some extent - scanner.
Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.
JYso
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on play…
[灯灯]微服务中后台快速开发平台，支持jdk21、jdk17、jdk8，专注于多租户、开放平台解决方案，亦可作为普通项目（非SaaS架构）的基础开发框架使用，目前已实现插拔式数据库隔离、SCHEMA隔离、字段隔离 等租户隔离方案。
Laravel XSS Protection Middleware
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
Automation tool to testing and confirm the xss vulnerability.
Study Notes For Web Hacking / Web安全学习笔记
Local File Inclusion discovery and exploitation tool
LFITester is a Python3 program that automates the detection and exploitation of Local File Inclusion (LFI) vulnerabilities on a server.