broken-authentication

A proper approach to pentest a Web application with the mixture of all useful payloads and complete testing guidance of attacks. Designed as a quick reference cheat sheet for your pentesting and bug bounty engagement.

Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities

Demonstration of an Android attack through a vulnerability in Android

Don't have a professional version of BurpSuite? It doesn 't matter . I wrote scripts to solve their labs.

Bachelor’s Work - WEB programming

Short description of this project

Bachelor’s Work - WEB programming

ExploitXcel is a gamified web application designed to teach penetration testing and vulnerability management through hands-on challenges.

This repository serves as the PoW of my 3-month remote internship cum training at Cyber Secured India

The application contained a broken password reset implementation that failed to properly validate the relationship between the password reset request and the intended user account. By manipulating user-controlled parameters during the reset process, it was possible to reset another user's password without proper authorization.

Ejemplo de vulnerabilidades: A1 - SQL injection y A2 - Pérdida de Autenticación según OWASP TOP 10 2017

Curso de OWASP Top 10: de Injections a monitoramento.

A hands-on project demonstrating broken authentication vulnerabilities, common authentication flaws, and practical security testing concepts. Built for learning web application security, identifying authentication weaknesses, and understanding how insecure authentication mechanisms can be exploited and secured.

Focused on introduction to secure coding, emphasized concepts, principles, and best practices of structured secure programs within security standards.

Scanner automatizado de vulnerabilidades em APIs REST, com detecção determinística baseada no OWASP API Security Top 10 (2023). TCC em Sistemas de Informação — UFV.