laravel-framework
derrickschoen/laravel-frameworkFork of laravel/framework 10.50.2 with CVE-2026-48019 (CRLF injection in default email rule) backported into ValidatesAttributes::validateEmail.…
api-securityauthenticationemail-security+3
derrickschoen/laravel-frameworkFork of laravel/framework 10.50.2 with CVE-2026-48019 (CRLF injection in default email rule) backported into ValidatesAttributes::validateEmail.…
symfony/symfonyThe Symfony PHP framework
watchdogsecurity/porch-piratePorch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API…
crowdstrike/crowdfmsCrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the…
s4dhulabs/vimana-frameworkVimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to…
wso2/carbon-identity-frameworkCore framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…
projectdiscovery/katanaA next-generation crawling and spidering framework.
owasp/nettackerAutomated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
shoucheng3/vert-x3__vertx-web_cve-2018-12542_3-5-3-cr1Exploit for CVE-2018-12542 in Vert.x-Web, a Java web framework. Demonstrates a path traversal vulnerability allowing unauthorized access to static…
shoucheng3/apache__dubbo_cve-2021-30180_2-7-9Exploit for CVE-2021-30180 targeting Apache Dubbo RPC framework, enabling remote code execution via crafted RPC requests in vulnerable versions.
shacode/olyx🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…
owasp/crapiDeliberately vulnerable microservices API designed for hands-on training in the OWASP API Security Top 10 risks, with built-in challenges and a…
dolevf/graphw00fGraphQL server engine fingerprinting tool that sends benign and malformed queries to identify backend technology and assess security defenses via the…
owasp/apicheckModular DevSecOps toolset for REST API security testing, designed for developers, sysadmins, and penetration testers to automate security checks…
nccgroup/httpsignaturesA Burp Suite extension implementing the Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 draft.
dz-y/azure-apim-dev-portal-signup-bypassPython script to bypass Azure APIM signup when UI is disabled, this is different from the CVE-2025-66390 as it does not require you to setup anything…
learner202649/cve-2025-11203-pocThe code for personally reproducing the corresponding vulnerability
owasp/cheatsheetseriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.