Session Hijacking Visual Exploitation
-
Updated
Mar 7, 2024 - JavaScript
#
session-hijacking
Here are 50 public repositories matching this topic...
Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security tool usage.
enumeration penetration-testing malware-analysis denial-of-service scanning ethical-hacking web-hacking social-engineering footprinting vulnerability-analysis session-hijacking system-hacking android-hacking cehv13 firewall-ids-ips iot-security-ot-security
-
Updated
Jan 28, 2026
A Deliberately Insecure Web Application
training education security practice hacking xss brute-force-attacks learn sql-injection csrf infosec web-security webappsec security-threats owasp-top-10 session-fixation sensitive-data-exposure session-hijacking local-file-inclusion path-traversal
-
Updated
Jan 9, 2020 - PHP
PHP Cookie Stealing Scripts for use in XSS
-
Updated
Jul 26, 2018 - PHP
Local PHP/MySQL e-wallet application combined with a hands-on cybersecurity demo lab. Implements user/admin auth, balances, transfers, CSRF protection, session timeouts, login lockout, and hashing. Includes a toggleable Vulnerable/Secure lab to demonstrate XSS and session hijacking with real code and mitigations.
session-management php-mysql csrf-protection ethical-hacking secure-coding vulnerable-web-app e-wallet learning-project session-hijacking web-security-lab authentication-security cybersecurity-demo xss-demo
-
Updated
Mar 31, 2026 - PHP
Cybersecurity Threats & Vulnerabilities Guide is a comprehensive educational resource that provides detailed documentation, detection scripts, and prevention strategies for various cybersecurity threats.
students phishing worms ddos-attacks sql-injection csrf arp-poisoning xss-attacks port-scanning man-in-the-middle-attack rootkits trojans researchers session-hijacking system-administrators ransomware-dectection
-
Updated
May 26, 2026 - Python
CyberX-AI-Digital-Twin is an AI-powered cybersecurity platform that uses digital twin technology to simulate, detect, and analyze cyber threats in a safe, isolated environment. Ideal for researchers, developers, and educators to test and enhance network security.
flask ldap-authentication vulnerability-assessment mitre-attack digital-twin session-hijacking sql-injection-detection bert-nlp cyber-attack-simulation ai-cybersecurity xss-prediction
-
Updated
Feb 13, 2025 - Python
Python spyware that captures keystrokes, mouse inputs, screenshots & microphone audio — exfiltrates via email every 10 seconds with self-delete on discovery.
keylogger malware-development session-hijacking process-injection information-stealer cookie-theft credential-harvesting
-
Updated
May 9, 2026 - Python
A tiny flask app for helping red-teamers, purple teamers, and pentesters in delivery, data exfiltration, and some attacks (SSRF, XXE, XSS, Session Hijacking, Session Riding).
xss-exploitation exfiltration pentest-tool redteam mitre-attack session-hijacking cookie-stealer pentesting-tools purple-team redteam-tools session-riding
-
Updated
Sep 20, 2025 - Python
Powershell scripts for scanning ASP.NET apps
powershell cookies sql-injection csrf ps asp-net csrf-protection csrf-tokens powershell-script vulnerability-detection vulnerability-scanners vulnerability-assessment input-validation web-config url-encoded vulnerability-scanning session-hijacking sql-injection-exploitation cookie-properties web-config-scanner
-
Updated
Aug 11, 2023 - PowerShell
Notes & misc taken from Complete Ethical Hacking Bootcamp 2021: ZTM(ARCHIVED) and EC-Council's CodeRed
markdown notes scripting hacking nmap penetration-testing vulnerability exploitation metasploit-framework privilege-escalation ethical-hacking web-penetration-testing owasp-top-10 session-hijacking open-source-intelligence network-pentesting snort3 nmap-scan cehv12
-
Updated
Mar 9, 2023 - Python
Intentionally vulnerable captive portal lab for wireless security training. Demonstrates session hijacking, authentication bypass, and network security vulnerabilities. Docker containerized for safe, isolated learning environments. FOR EDUCATIONAL USE ONLY.
penetration-testing web-security captive-portal vulnerability-assessment security-training ethical-hacking network-security authentication-bypass wireless-security session-hijacking
-
Updated
Oct 6, 2025 - Python
Demonstrating exploitation of missing HTTP cookie flags
security poc pentesting burp exploitation demonstration httponly firesheep cookie-flags session-hijacking
-
Updated
Jun 28, 2019 - JavaScript
The Device Fingerprint Generator is a web-based tool that uniquely identifies devices based on various browser and system attributes. By leveraging JavaScript and web APIs, it creates a consistent fingerprint that can be used for analytics, fraud prevention, and security purposes.
-
Updated
Mar 31, 2025 - HTML
MySQLSessionHandler Class (PHP 7.1)
mysql php php7 session sessionstorage session-management mysqli session-handler session-fixation php-class session-hijacking sessionhandler-interface
-
Updated
Apr 20, 2019 - PHP
This repository demonstrates a privilege escalation attack targeting Open5GS's WebUI, exploiting unauthenticated database connections and forged session cookies/JWT tokens. The analysis reveals critical vulnerabilities in authentication mechanisms, offering insights for securing 5G network components.
-
Updated
Jun 12, 2025 - Python
Demo tool for hijacking TCP sessions
-
Updated
Jun 6, 2021 - C++
ArchPhish is an advanced, Go-based penetration testing framework that bypasses two-factor authentication (2FA) using transparent reverse‑proxy techniques. It enables authorised red teams to assess an organisation's resilience against sophisticated phishing attacks by capturing credentials and session tokens in real time, even from MFA‑protected
phishing reverse-proxy cybersecurity penetration-testing offensive-security cyber-security ethical-hacking red-team security-automation security-tools session-hijacking penetration-testing-tools phishlets mfa-bypass cybersecurity-tools 2fa-bypass credential-harvesting
-
Updated
May 21, 2026 - Go
Hands-on TCP/IP attack lab covering SYN Flooding, TCP RST Attack, Session Hijacking, and Reverse Shell - performed in an isolated SEED Labs virtual environment. MS Cybersecurity | NUCES Islamabad.
python cybersecurity wireshark scapy tcp-ip ethical-hacking network-security syn-flood session-hijacking seed-labs
-
Updated
Mar 4, 2026 - C
A red and purple team utility for extracting, encrypting, and simulating browser session hijacking scenarios on Windows endpoints. Designed for training, research, and detection development.
-
Updated
Sep 19, 2025 - Python
Improve this page
Add a description, image, and links to the session-hijacking topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the session-hijacking topic, visit your repo's landing page and select "manage topics."