thewation Goto Github PK

cicephpbox

The command injection sandbox is a tool for testing command injection vulnerabilities in web apps, in a safe environment.

cicesandbox

This web application provides a sandbox environment for testing and learning about command injection and code execution vulnerabilities, with several endpoints for testing different types of vulnerabilities.

cloudssrfer

CloudSSRFer tests SSRF on Amazon AWS cloud to extract sensitive information.

dependencyconfusionlab

Designed to showcase the concept of dependency confusion, a security vulnerability that can arise when using package managers like pip.

favxhasher

FavXHasher is a cli tool designed to calculate the hash value of a favicon from a given URL, This tool can be particularly useful for detecting potential phishing websites by leveraging Shodan's search capabilities.

larafa

nodejscelab

The purpose of this code is to demonstrate the potential risks associated with using the `eval()` function with user input.

nodejscookiestealer

The NodeJs cookie stealer is a tool that can be used in penetration testing and XSS attacks to steal browser cookies from victims.

nodejsprototypepollutionlab

Vulnerable code example that illustrates the prototype pollution vulnerability in Node.js.

nodejsssti

Express app with Pug templates demonstrating SSTI vulnerability and secure implementation for educational purposes.

nodemongonosqlilab

Explore NoSQL injection vulnerabilities with this educational project on secure coding practices.

passgate

A list of commonly used passwords that should not be used for security purposes

phpcookiestealer

The PHP cookie stealer is a tool that can be used in penetration testing (XSS attacks) to steal browser cookies for poc.

phpdeserializationlab

This lab demonstrates a simple example of insecure deserialization in PHP. Insecure deserialization is a vulnerability that can lead to remote code execution when an application deserializes untrusted data.

phpssti

This repository provides an example PHP application using Twig templates to illustrate Server-Side Template Injection (SSTI) vulnerabilities and a safe implementation.

phpupbox

PHPUpBox is a project that demonstrates file upload security issues in PHP applications.

pixelfarm

Various formats that can be used for testing and bypassing server-side MIME type verification during file uploads.

pythoncookiestealer

The Python cookie stealer is a tool that can be used in penetration testing and XSS attacks to steal browser cookies from victims.

pythonssti

FastAPI app with Jinja2 SSTI vulnerability example to demonstrate security risks in web applications.

tamperx

This tool checks whether a target URL is vulnerable to verb tampering.

testnezhadcrm

The project is designed for educational purposes and aims to showcase how a frontend can interact with an API to perform basic CRUD operations.

thewation

tplmap3

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

websecurityvision

WebSecurityVision is a tool for checking XSS vulnerabilities and security headers in web applications, displaying browser information if vulnerabilities are found.

xxesandbox

The PHP sandbox environment is a Docker-based tool for testing XML processing code, with XXE vulnerabilities demonstrated and security considerations explained.