Proof of concepts

A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.

Image courtesy of Hackaday

Contents

.
├── CSRF
│   └── csrf_no_redirect.html
├── LICENSE
├── Open redirect
│   ├── open_redirect_referrer.html
│   └── open_redirect_sign_in_form.md
├── Other
│   ├── reverse_tabnabbing.html
│   └── subdomain_takeover.html
├── README.md
└── XSS
    ├── pastejacking_reflected_xss_payload.html
    ├── xss_hidden_input.html
    └── xss_password_manager_form.html

Setup

Clone this repository to a website you use for testing purposes, publish everything, and you will be able to use all of the proof of concepts under the /proof-of-concepts/ directory (e.g. http://example.com/proof-of-concepts/pastejacking_reflected_xss_payload.html).

$ git clone https://github.com/EdOverflow/proof-of-concepts.git

⚠ Legal Disclaimer

This project is made for educational and ethical testing purposes only. Usage any of the proof of concepts found in this repository for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage caused by these proof of concepts.

Contributing

Do you have a fun, creative and convincing proof of concept? Please feel free to submit a pull request and we will add it to this repository.

Using the issue tracker ?

The issue tracker is the preferred channel for bug reports and features requests.

Issues and labels ?

The bug tracker utilizes several labels to help organize and identify issues.

Guidelines for bug reports ?

Use the GitHub issue search — check if the issue has already been reported.