Session Hijacking Visual Exploitation

A Deliberately Insecure Web Application

PHP Cookie Stealing Scripts for use in XSS

Powershell scripts for scanning ASP.NET apps

A tiny flask app for helping pentesters and bug hunters in XSS, Session Hijacking, Session Riding and Cookie Thieve.

MySQLSessionHandler Class (PHP 7.1)

Demo tool for hijacking TCP sessions

Demonstrating exploitation of missing HTTP cookie flags

Notes & misc taken from Complete Ethical Hacking Bootcamp 2021: ZTM(ARCHIVED) and EC-Council's CodeRed

경찰청 자문을 위해 진행한 프로젝트

Python server captures inbound HTTP connections along with its respective cookies

KerioMaker (VPN Provider) Session Hijacker and upload to third-party site, You can convert this script into an executable file and send it to your target

Performing TCP/IP exploits such as SYN Flooding, TCP RST attack on SSH and TLS connections, session hijacking, and revershell attacks

A part of Hijack Challenge from Tryhackme

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.

HTTP Session Security for Laravel

Limit the number of open sessions per users

XSS cookie stealer using a simple php script.

This repository contains a comprehensive analysis of the PandaBanker malware. The analysis includes examining various techniques employed by the malware such as API Hooking, Process Hijacking, and Memory Dumping. The investigation also involves practical steps using various tools to understand the malware's behavior and persistence mechanisms.