All Projects → odino → wasec

odino / wasec

Licence: other
Examples of security features (or mishaps) on web applications -- these are mostly examples and tutorials from the WASEC book.

Programming Languages

javascript
184084 projects - #8 most used programming language
HTML
75241 projects

Projects that are alternatives of or similar to wasec

Xss Payload List
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
Stars: ✭ 2,617 (+3436.49%)
Mutual labels:  xss, websecurity
Application Security Engineer Interview Questions
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
Stars: ✭ 267 (+260.81%)
Mutual labels:  xss, websecurity
Express Security
nodejs + express security and performance boilerplate.
Stars: ✭ 37 (-50%)
Mutual labels:  csp, xss
Cerberus
一款功能强大的漏洞扫描器,子域名爆破使用aioDNS,asyncio异步快速扫描,覆盖目标全方位资产进行批量漏洞扫描,中间件信息收集,自动收集ip代理,探测Waf信息时自动使用来保护本机真实Ip,在本机Ip被Waf杀死后,自动切换代理Ip进行扫描,Waf信息收集(国内外100+款waf信息)包括安全狗,云锁,阿里云,云盾,腾讯云等,提供部分已知waf bypass 方案,中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等),支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能
Stars: ✭ 389 (+425.68%)
Mutual labels:  xss, websecurity
Hacker101
Source code for Hacker101.com - a free online web and mobile security class.
Stars: ✭ 12,246 (+16448.65%)
Mutual labels:  xss, clickjacking
Csp Builder
Build Content-Security-Policy headers from a JSON file (or build them programmatically)
Stars: ✭ 496 (+570.27%)
Mutual labels:  csp, xss
Javasecurity
Java web and command line applications demonstrating various security topics
Stars: ✭ 182 (+145.95%)
Mutual labels:  csp, xss
gatsby-plugin-csp
A Gatsby plugin which adds strict Content Security Policy to your project.
Stars: ✭ 40 (-45.95%)
Mutual labels:  csp
HolyTips
A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.
Stars: ✭ 1,210 (+1535.14%)
Mutual labels:  websecurity
diwa
A Deliberately Insecure Web Application
Stars: ✭ 32 (-56.76%)
Mutual labels:  xss
firecracker
Stop half-done API specifications! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by validating your API specifications.
Stars: ✭ 438 (+491.89%)
Mutual labels:  websecurity
awesome-web-security
📓 Some notes and impressive articles of Web Security
Stars: ✭ 72 (-2.7%)
Mutual labels:  websecurity
BugHunter
No description or website provided.
Stars: ✭ 23 (-68.92%)
Mutual labels:  clickjacking
hast-util-sanitize
utility to sanitize hast nodes
Stars: ✭ 34 (-54.05%)
Mutual labels:  xss
persistent-clientside-xss
Exploit generator and Taint Engine to find persistent (and reflected) client-side XSS
Stars: ✭ 19 (-74.32%)
Mutual labels:  xss
dhroraryus
Dhroraryus generates schedules intelligently according to one's constraints and preferences
Stars: ✭ 16 (-78.38%)
Mutual labels:  csp
functional-core-async
almost, but not quite, entirely unlike core.async
Stars: ✭ 17 (-77.03%)
Mutual labels:  csp
Eagle
Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities
Stars: ✭ 85 (+14.86%)
Mutual labels:  xss
pentest-notes
渗透测试☞经验/思路/总结/想法/笔记
Stars: ✭ 734 (+891.89%)
Mutual labels:  websecurity
safe-marked
Markdown to HTML using marked and DOMPurify. Safe by default.
Stars: ✭ 31 (-58.11%)
Mutual labels:  xss

WASEC: Web Application SECurity

Examples of security features (or mishaps) on web applications -- these are mostly examples and tutorials from the WASEC book.

Installation

Add this line to your hostfile:

127.0.0.1 wasec.local sub.wasec.local wasec2.local

Each of the directories in this repo has its own README, so go ahead and explore! A good place to start? Check the clickjacking example.

Most of them can be run with NodeJS -- I am using v10.1.0 but anything above version 9 should work.

Everything has been tested on Google Chrome 65.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].