yeswehack / vulnerable-code-snippets Goto Github PK
View Code? Open in Web Editor NEWTwitter vulnerable snippets
vulnerable-code-snippets's People
Contributors
Stargazers
Watchers
Forkers
attacker-codeninja 0gr3n1nj4 william3johnson inferno-inc kipyegonmark 1dveeran bbhunter chanpu9 vaginessa thisismyrobot mr-xhunt papicella 0xkayala brum3ns shaikzubair cloudnative-security alexsandershaw boost-sandbox ziduhuihai mellow-hype 0xsojalsec gmh5225 sonpt-afk xtenex ronin-dojo 0x01-tools elameen37 marienmare averroes al3l3j4ndr0 orguetta shubhampy root4rce bhubesh757 iamlucif3r sbzo bl4de 5l1v3r1 m4tlch cyberhat121 cyberkartik ganesh2183 mariojoao31 tousif-1 tester24h wilfridblanc intercepttt abduladil02 adventurecodes shashankdso burnbutcher414 shaunmarshall resrchr1 execveat emadyay the-valluvarsploit austinkapowers test-scm cemily14 imdanielpaul mohamedabdelhady933 0xroi matts-test lamsecurity cyberdesu soham7-dev marciopocebon sn0wcra5h ava-jeevayovane ysamuelii init0x01 nehbha tudorhacks touhidulshawan udaydocs virajnayak redeyepilot websecresearch pamamolf jess-belliveau nan-h rpfa1 svorma ghost00shell thanhnx9 stutiruparel muqsitbaig markusraym jaroslaw-wieczorek lukkol ktsil d1s7r4c73d florentinledy bharambetejas cyberfvde harsgupta crock-nic zsonar g00b nageshwari1511vulnerable-code-snippets's Issues
Dockerize the project
Dockerizing the project would make it easier for people to run the snippets without installing PHP or MySQL on their systems.
We can potentially use Docker Compose to make it even easier.
XSS 10-xss.php - (Single quote char ['] exploitation may not work, depending on the PHP version) DOM JavaScript exploitation still works.
Hi,
I think the XSS example (XSS/2/10-xss.php) is no longer vulnerable.
According to the PHP manuals on htmlspecialchars they changes the default flags of htmlspecialchars enabling ENT_QUOTES by default now.
Vulnerable Code leading to Path Traversal and Information disclosure.
Error in CORS snippet
https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSNotSupportingCredentials
According to the documentation, Cookies cannot be passed with ACAO: * and ACAC: true
This happens in a CORS code snippet
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.