VOOZH

URL: https://github.com/topics/broken-access-control

⇱ broken-access-control · GitHub Topics · GitHub

#

broken-access-control

Here are 33 public repositories matching this topic...

WuliRuler / AutorizePro

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it significantly reduces the false positive rate and improves the efficiency of vulnerability detection.

ai authorization pentesting bugbounty vulnerability-detection burpsuite security-tools burp-extensions pentest-tool bounty-hunters idor unauthorized sdlc-tools bounty-hunting-tools broken-access-control llm idor-vulnerability unauthorized-access-tool

Updated
Python

dub-flow / sessionprobe

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

pentesting-tool broken-access-control

Updated
Go

Chocapikk / CVE-2023-22515

CVE-2023-22515: Confluence Broken Access Control Exploit

security exploit vulnerability infosec confluence privilege-escalation broken-access-control cve-2023-22515

Updated
Python

AIex-3 / confluence-hack

CVE-2023-22515

security exploit cybersecurity vulnerability confluence privilege-escalation remote-code-execution broken-access-control cve-2023-22515

Updated
Java

dev-angelist / Web-Application-Penetration-Tester-WAPT-Notes

Web Application Penetration Tester (WAPT) Notes

injection owasp webapp owasp-zap burpsuite owasp-top-10 injection-attacks webapplicationhacking wapt waptx broken-access-control portswigger-labs webapppentesting webapplicationsecurity webappplicationtesting webapppentest

Updated

NullChapter / Challenges_2023_OWASP_10

This repository contains OWASP Top 10 CTF challenges designed to test your skills in web application security. Each category includes both "easy" and "hard" challenges.

kubernetes crypto xml xss-vulnerability ssrf owasp-top-10 sql-injection-exploitation security-misconfiguration broken-access-control security-logging-and-monitoring vulnerable-and-outdated-components

Updated
Python

richeeta / DEFCON33-Siriously-Leaky

Slides and PoCs for my DEF CON 33 & HOU.SEC.CON 2025 talk on overlooked attack surfaces across Apple's ecosystem.

ios apple defcon siri shortcuts ios-security vulnerability-report vulnerability-research idor ipados broken-access-control apple-intelligence defcon33 cve-2024-44235 cve-2025-24198 cve-2025-24225 cve-2025-30468 apple-security-bounty-program houseccon

Updated
Python

la1n23 / PwnFoxy

Better version of PwnFox

firefox-extension burp-extensions idor broken-access-control pwnfox

Updated
JavaScript

fugerit79 / unit-test-demo-app

L'obiettivo di questo progetto è di mostrare come è possibile usare dei tag degli unit test per cercare di garantire la verifica di aspetti specifici di una applicazione.

java security unit-testing junit rbac owasp-top-10 quarkus quarkusio broken-access-control

Updated
Java

abeker / OWASP-Top-10-Front

Bachelor’s Work - WEB programming

security angular protection monitoring logging injection xss-vulnerability vulnerability-detection owasp-top-10 broken-authentication broken-access-control

Updated
TypeScript

TheMalwareGuardian / brokeCLAUDIA

CVE-2025-41090 (brokeCLAUDIA): Broken access control in microCLAUDIA, the anti-ransomware platform by CCN-CERT.

broken-access-control microclaudia ccn-cert cve-2025-41090

Updated
Python

JacYuan1 / Insecure-Blog-Application-Project

Fixing an Insecure Blog Application.

nginx php postgresql cybersecurity xss-vulnerability csrf-protection secure-software-development broken-access-control

Updated
PHP

merhametsize / duo-gemsmith

A Duolingo hack that lets you stack up gems

jwt duolingo duolingo-api broken-access-control duolingo-hack

Updated
Python

👁 eventmaster

TobiZog / eventmaster

The most hackable Ticket-Shop!

sql-injection it-security owasp-top-10 cross-site-scripting broken-access-control

Updated
Vue

MuhaibShamsher / BuggyBuy

BuggyBuy: Deliberately Vulnerable MERN Stack Web Application for Security Testing

javascript cybersecurity xss-vulnerability privilege-escalation nosql-injection mern-project broken-access-control idor-vulnerability

Updated
JavaScript

LittleHaku / cybersecurity-proj1

Django website with intentional security flaws and their fixes to demonstrate vulnerabilities commonly found in web applications. Flaws include SQL injection, broken access control, SSRF, security misconfiguration, and CSRF.

django cybersecurity sql-injection csrf ssrf broken-access-control

Updated
Python

m3ssap0 / wordpress-jetpack-broken-access-control-vulnerable-application

WARNING: This is a vulnerable application to test the exploit for the Jetpack < 13.9.1 broken access control (CVE-2024-9926). Run it at your own risk!

wordpress jetpack vulnerable-application broken-access-control cve-2024-9926

Updated
Dockerfile

Swastik1616 / Cybersecurity-Internship-Cyber-Secured-India

This repository serves as the PoW of my 3-month remote internship cum training at Cyber Secured India

cybersecurity nmap cloud-computing csrf digital-forensics operating-systems kali-linux metasploit-framework ethical-hacking burpsuite windows-privilege-escalation linux-privilege-escalation ssti injections android-pentesting computer-fundamentals broken-authentication broken-access-control

Updated

dorabz / security-vulnerabilities-django

Project in Django Python on theme Security vulnerabilites - Sensitive data exposure, Broken Access Control.

python django security-vulnerability sensitive-data-exposure broken-access-control

Updated
Python

SuYK-666 / LLM_API_Vuln_Scanner

An intelligent Web API security auditing tool powered by LLMs. It automates the detection, verification, and risk assessment of complex Broken Access Control (IDOR) vulnerabilities by understanding business logic and analyzing JSON schema overlaps.

python3 penetration-testing vulnerability-detection security-scanner api-security idor broken-access-control llm

Updated
Python

Improve this page

Add a description, image, and links to the broken-access-control topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the broken-access-control topic, visit your repo's landing page and select "manage topics."

You can’t perform that action at this time.