csrf-attacks

There are 0 repository under csrf-attacks topic.

0xInfection / XSRFProbe
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
audit crafted-tokens crawler csrf csrf-attacks csrf-poc csrf-scanner csrf-tokens spider token-generation xsrf
Language:Python 1247
dunglas / DunglasAngularCsrfBundle
Automatic CSRF protection for JavaScript apps using a Symfony API
symfony symfony-bundle csrf csrf-protection csrf-attacks xsrf php angularjs angular react axios vue jquery
Language:PHP 148
app
csrfshark / app
🚀 CSRFShark - a utility for manipulating cross-site request forgery attacks
csrf-attacks csrf-poc bugbounty generator pentest csrf security tools pentest-tool
Language:CSS 33
cookies-sniffer
SystemVll / cookies-sniffer
This app is an advanced XSS panel, this is used for session grabbing with XSS exploit and <img src="grabber_url">
csrf-attacks web-hacking vuln-tool
Language:JavaScript 30
vzhou842 / definitely-secure-bank
A definitely (read: not) secure online banking site. Built for demo purposes as an example of common security vulnerabilities / what NOT to do.
csrf csrf-attacks csrf-prevention demo security web-security
Language:JavaScript 25
cypherpunk-symposium / csrf-apache-modsecurity-rb
👾 monitor web server's log files against CSRF attacks (a modification of apache's mod_security to log these attacks)
csrf-attacks c apache
Language:HTML 14
robjtede / webpwn
Hackable website for teaching/training purposes. Includes my undergraduate thesis.
nodejs hacking sql-injection xss-exploitation csrf xss sql password-strength authorization authentication csrf-attacks
Language:JavaScript 14
AyemunHossain / CSRF-vulnerability-detection
Automated Blackbox CSRF vulnerability detection tools
csrf csrf-attacks csrf-protection csrf-scanner csrf-token csrf-tokens
Language:Python 7
hack-with-ethics / csrf_google
(csrf) google just got a idea to bypass or manipulate the 2fa in gmail service but was successfull in bypassing the device name in gmail 2fa
bypass cross-site-request-forgery csrf csrf-attacks google-bug google-csrf request-forgery
6
toggio / SecureTokenizer
A PHP Library for Cryptographically Secure Token Generation and Management
cryptography javascript php random replay-attack secure sql-injection-attacks token csrf csrf-attacks csrf-protection csrf-tokens xss ajax tokenizer xss-detection
Language:PHP 6
LinuxUser255 / Web-Security-Academy-Series
Exploit Code, notes, and resources to accompany PortSwiggers' WebAcademy Labs.
authentication burpsuite business-logic clickjacking command-injection csrf-attacks exploits fileupload information-disclosure pentest-scripts python3 ssrf-tool webapp webapphacking webapppentesting xss-exploitation xxe-injection portswigger-labs portswigger
Language:Python 5
enriquetomasmb / bruteforce-bypass
Bruteforce HTTP POST with CSRF token bypass (anti-CSRF)
bruteforce bruteforce-protection bruteforce-wordlist csrf-attacks http-requests offensive-security
Language:Python 4
julfiker / csrf-php
A service to handle csrf on POST|PULL\DELETE request for php application
csrf csrf-attacks csrf-prevention csrf-protection opensource php
Language:PHP 3
phanatagama / Web-CTF-Cheatsheet
Web CTF CheatSheet 🐈
php ssti xss-exploitation sqlinjection ssrf-payload csrf-attacks graphql cheatsheet
Language:Ruby 3
zakirullin / csrf-middleware
A PSR-15 compatible middleware that is designed to simplify CSRF verifcation process
csrf csrf-attacks csrf-protection psr-15 psr-7 verification
Language:PHP 3
Charlot-DEDJINOU / CSRF-attack
This project is an educational example of a CSRF (Cross-Site Request Forgery) attack to demonstrate how a web application can be vulnerable to this type of attack.
csrf csrf-attacks expressjs mongodb nodejs
Language:JavaScript 2
FREAKYBOBr / Basic-Penetration-Testing-Report-Ethical-Hacking
This repository contains a basic penetration testing report focusing on ethical hacking techniques and methodologies. It includes findings, analysis, and recommendations to improve the security posture of the tested system.
basic-pentesting brute-force-attacks csrf-attacks ethical-hacking hashing-passwords idor-attack man-in-the-middle-attack prepared-queries replay-attack sql-injection-attacks xss-attacks
2
Pawel-Kica / csrf-university-project-starter
📔 Simple blog project vulnerable to CSRF attacks
csrf-attacks csrf-protection ejs-templates express javascript nodejs
Language:JavaScript 2
roflcer / Cross-Site-Request-Forgery-Attack
A CSRF attack involves a victim user, a trusted site, and a malicious site. The victim user holds an active session with a trusted site and simultaneously visits a malicious site. The malicious site injects a HTTP request for the trusted site into the victim user session compromising its integrity. In this lab, you will be attacking a web-based message board system using CSRF attacks. We modi- fied an open-source message board application called phpBB to make it vulnerable to CSRF attacks. The original application has implemented several countermeasures for avoiding CSRF attacks
csrf-attacks http http-requests phpbb web-security
2
AmerSurkovic / DrvenijaOnline
Online service application for book trading. Application was originally developed for 'Web Technologies' course @ETF_Sarajevo. After that, I have created XSS and CSRF omissions in the application in order to present how are mentioned attacks done on the web application.
php html5 css javascript xss-exploitation csrf-attacks
Language:PHP 1
ankushlakhani3 / Ethical-Hacking-Security-Application
It is a desktop application made in PYQT5 and various python libraries, basically it is a kind of GUI version of lazyhack. It also contains advance backdoor and can perform various attack.
attack backdoor-attacks csrf-attacks ddos-attacks hacking hacking-tool mitm-attacks penetration-testing pentesting reverse-shell vulnerability-scanners xss-vulnerability
Language:Python 1
DevExpress-Examples / asp-net-core-dashboard-antiforgery
How to apply antiforgery request validation to the ASP.NET Core Dashboard control.
business-intelligence asp-net-core web-dashboard dashboard-for-asp-net-core csrf csrf-protection csrf-tokens csrf-attacks antiforgery
Language:C# 1
lucianoscarpaci / Pen-Testing-Live-Targets
Immerse yourself in a practical hacking exercise to gain valuable experience with prevalent security exploits. Explore six key vulnerabilities, including SQL injection, session hijacking, username enumeration, IDOR, XSS, and CSRF, for a comprehensive cybersecurity learning experience.
csrf-attacks cybersecurity ethical-hacking idor-attack penetration-testing practical-hacking-framework session-hijacking sqli-injection username-enumeration vulnerability-assessment web-application-security xss-attacks
Language:HTML 1
MarcinHoppe / AspNetCore.Csrf.Sample
A sample application that shows three ways to mitigate CSRF attacks in ASP.NET Core applications
asp-net asp-net-core csrf-attacks cookie http security
Language:C# 1
rohitajariwal / web-app-security-scanner
A web crawler and vulnerability scanner tool developed by Rohit Ajariwal
clickjacking commandinjection crosssitescripting csrf csrf-attacks ldap lfi-exploitation lfi-scanner lfi-vulnerability sql-injection sql-injection-exploitation ssrf ssrf-exploit ssrf-payload ssrf-scanner vulnerability-scanners webcrawler xxe xxe-injection xxe-payloads
Language:Python 1
RudigerMorinDocter / CSRF-Attender
CSRF Attender is a Burp Suite extension that illustrates a PoC for automatically generating CSRF attacks on a WebSite (works only for GET requests and HTTP1.1)
csrf csrf-prevention csrf-attacks csrf-poc
Language:Java 1
Sitaras / eClass-Penetration-Testing
🔒| Evaluating the security (exploiting and fixing vulnerabilities) of Open eClass 2.3 (University of Athens) platform.
defense-methods xss xss-attacks xss-detection xss-vulnerability csrf-attacks csrf-prevention csrf-protection csrf-tokens php sqlinjection penetration-testing eclass rfi vulnerability-detection
Language:PHP 1
Subangkar / Computer-Security-CSE-406-BUET
Demonstration of some attacks exploiting security vulnerabilities of websites and OSs as tasks of Computer Security LAB, CSE 406 in Level-4, Term-1 of CSE, BUET
des-encryption des-cipher substitution-cipher des-decrypt buffer-overflow-attack buffer-overflow-vulnerability buffer-overflow-exploit xss-vulnerability xss-exploitation xss-attacks csrf-attacks ip-spoofing ping-spoofing raw-sockets sniffing sniffer cse-buet buet seedlab
Language:Python 1
thayeeb9211 / ortho-secure
Orthosecure: Secure Dentistry Appointment Booking and Management System. It is designed to be robust and secure application with enhanced security and compliance checks within containerized environments. It leverages cutting-edge technologies to monitor, analyze, and secure workloads in real-time.
cicd csrf-attacks ddos-attacks devsecops docker-compose docker-image gitlab security xss-attacks xss-vulnerability
Language:JavaScript 1
thewarpaint / hyperlogout
Hyperlogout!
csrf csrf-attacks gulp react
Language:JavaScript 1
Yo7cc / Basic-Penetration-Testing-Report-Ethical-Hacking
Basic Penetration Testing Report for Ethical Hacking covering key findings and recommendations for improving cybersecurity defenses. Detailed analysis of vulnerabilities identified during the testing process and steps to enhance overall security posture.
basic-pentesting brute-force-attacks csrf-attacks ethical-hacking hashing-passwords idor-attack man-in-the-middle-attack prepared-queries replay-attack sql-injection-attacks xss-attacks
1
FaisalAhmed21 / Basic-Penetration-Testing-Report-Ethical-Hacking
basic-pentesting brute-force-attacks csrf-attacks ethical-hacking hashing-passwords idor-attack man-in-the-middle-attack prepared-queries replay-attack sql-injection-attacks xss-attacks
0
fatin-farhan / Capture-The-Flag
Five CTF challenges, two easy, two medium, one hard
blind-sql-injection command-injection-attack csrf-attacks sqli-attack xss-attack
Language:JavaScript 0
sal00ma / Client-side-attacks.
“Hi, I’m Salma Muhamed, and in this write-up, I’ll be going through client-side attack techniques. This write-up isn’t unique; many people may find better resources elsewhere, but it’s more of a personal note for myself. I’ve shared it with you, and I hope you find it useful.”
client-side cors csrf-attacks xss-vulnerability
0
deblunt / Basic-Penetration-Testing-Report-Ethical-Hacking
This repository contains a basic penetration testing report focusing on ethical hacking practices. It provides insights into identifying vulnerabilities and improving overall security measures.
basic-pentesting brute-force-attacks csrf-attacks ethical-hacking hashing-passwords idor-attack man-in-the-middle-attack prepared-queries replay-attack sql-injection-attacks xss-attacks
SANTHOSH4508 / Basic-Penetration-Testing-Report-Ethical-Hacking
🛡️ Identify and report vulnerabilities in the TechEcommerce Project through structured penetration testing to enhance application security.
basic-pentesting blockchain-hacking brute-force-attacks csrf-attacks cybersecurity ethereum-security ethical-hacking hackathon-projects hashing-passwords idor-attack man-in-the-middle-attack network-scanning phishing-simulation prepared-queries sql-injection sql-injection-attacks web-app-testing xss-attacks

csrf-attacks

0xInfection / XSRFProbe

dunglas / DunglasAngularCsrfBundle

csrfshark / app

SystemVll / cookies-sniffer

vzhou842 / definitely-secure-bank

cypherpunk-symposium / csrf-apache-modsecurity-rb

robjtede / webpwn

AyemunHossain / CSRF-vulnerability-detection

hack-with-ethics / csrf_google

toggio / SecureTokenizer

LinuxUser255 / Web-Security-Academy-Series

enriquetomasmb / bruteforce-bypass

julfiker / csrf-php

phanatagama / Web-CTF-Cheatsheet

zakirullin / csrf-middleware

Charlot-DEDJINOU / CSRF-attack

FREAKYBOBr / Basic-Penetration-Testing-Report-Ethical-Hacking

Pawel-Kica / csrf-university-project-starter

roflcer / Cross-Site-Request-Forgery-Attack

AmerSurkovic / DrvenijaOnline

ankushlakhani3 / Ethical-Hacking-Security-Application

DevExpress-Examples / asp-net-core-dashboard-antiforgery

lucianoscarpaci / Pen-Testing-Live-Targets

MarcinHoppe / AspNetCore.Csrf.Sample

rohitajariwal / web-app-security-scanner

RudigerMorinDocter / CSRF-Attender

Sitaras / eClass-Penetration-Testing

Subangkar / Computer-Security-CSE-406-BUET

thayeeb9211 / ortho-secure

thewarpaint / hyperlogout

Yo7cc / Basic-Penetration-Testing-Report-Ethical-Hacking

FaisalAhmed21 / Basic-Penetration-Testing-Report-Ethical-Hacking

fatin-farhan / Capture-The-Flag

sal00ma / Client-side-attacks.

deblunt / Basic-Penetration-Testing-Report-Ethical-Hacking

SANTHOSH4508 / Basic-Penetration-Testing-Report-Ethical-Hacking