Session Hijacking Visual Exploitation
-
Updated
Mar 7, 2024 - JavaScript
#
session-hijacking
Here are 57 public repositories matching this topic...
Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security tool usage.
enumeration penetration-testing malware-analysis denial-of-service scanning ethical-hacking web-hacking social-engineering footprinting vulnerability-analysis session-hijacking system-hacking android-hacking cehv13 firewall-ids-ips iot-security-ot-security
-
Updated
Jan 28, 2026
A Deliberately Insecure Web Application
training education security practice hacking xss brute-force-attacks learn sql-injection csrf infosec web-security webappsec security-threats owasp-top-10 session-fixation sensitive-data-exposure session-hijacking local-file-inclusion path-traversal
-
Updated
Jan 9, 2020 - PHP
PHP Cookie Stealing Scripts for use in XSS
-
Updated
Jul 26, 2018 - PHP
Local PHP/MySQL e-wallet application combined with a hands-on cybersecurity demo lab. Implements user/admin auth, balances, transfers, CSRF protection, session timeouts, login lockout, and hashing. Includes a toggleable Vulnerable/Secure lab to demonstrate XSS and session hijacking with real code and mitigations.
session-management php-mysql csrf-protection ethical-hacking secure-coding vulnerable-web-app e-wallet learning-project session-hijacking web-security-lab authentication-security cybersecurity-demo xss-demo
-
Updated
Mar 31, 2026 - PHP
CyberX-AI-Digital-Twin is an AI-powered cybersecurity platform that uses digital twin technology to simulate, detect, and analyze cyber threats in a safe, isolated environment. Ideal for researchers, developers, and educators to test and enhance network security.
flask ldap-authentication vulnerability-assessment mitre-attack digital-twin session-hijacking sql-injection-detection bert-nlp cyber-attack-simulation ai-cybersecurity xss-prediction
-
Updated
Feb 13, 2025 - Python
Python spyware that captures keystrokes, mouse inputs, screenshots & microphone audio — exfiltrates via email every 10 seconds with self-delete on discovery.
keylogger malware-development session-hijacking process-injection information-stealer cookie-theft credential-harvesting
-
Updated
May 9, 2026 - Python
A tiny app to help red-teamers, purple teamers, and pentesters in delivery, data exfiltration, and some attacks (SSRF, XXE, XSS, Session Hijacking, Session Riding)
xss-exploitation exfiltration pentest-tool redteam mitre-attack session-hijacking cookie-stealer pentesting-tools purple-team redteam-tools session-riding
-
Updated
Aug 23, 2026 - Python
Powershell scripts for scanning ASP.NET apps
powershell cookies sql-injection csrf ps asp-net csrf-protection csrf-tokens powershell-script vulnerability-detection vulnerability-scanners vulnerability-assessment input-validation web-config url-encoded vulnerability-scanning session-hijacking sql-injection-exploitation cookie-properties web-config-scanner
-
Updated
Aug 11, 2023 - PowerShell
A structured collection of Certified Ethical Hacker (CEHv13) notes covering core cybersecurity concepts, practical techniques, and real-world insights to help in learning ethical hacking and penetration testing effectively.
cryptography cybersecurity enumeration penetration-testing infosec web-security malware-analysis iot-security ethical-hacking red-team vulnerability-scanning reconnaissance vulnerability-analysis cloud-security session-hijacking system-hacking ceh-v13 ceh-notes
-
Updated
Mar 25, 2026
Notes & misc taken from Complete Ethical Hacking Bootcamp 2021: ZTM(ARCHIVED) and EC-Council's CodeRed
markdown notes scripting hacking nmap penetration-testing vulnerability exploitation metasploit-framework privilege-escalation ethical-hacking web-penetration-testing owasp-top-10 session-hijacking open-source-intelligence network-pentesting snort3 nmap-scan cehv12
-
Updated
Mar 9, 2023 - Python
Intentionally vulnerable captive portal lab for wireless security training. Demonstrates session hijacking, authentication bypass, and network security vulnerabilities. Docker containerized for safe, isolated learning environments. FOR EDUCATIONAL USE ONLY.
penetration-testing web-security captive-portal vulnerability-assessment security-training ethical-hacking network-security authentication-bypass wireless-security session-hijacking
-
Updated
Oct 6, 2025 - Python
The Device Fingerprint Generator is a web-based tool that uniquely identifies devices based on various browser and system attributes. By leveraging JavaScript and web APIs, it creates a consistent fingerprint that can be used for analytics, fraud prevention, and security purposes.
-
Updated
Mar 31, 2025 - HTML
Demonstrating exploitation of missing HTTP cookie flags
security poc pentesting burp exploitation demonstration httponly firesheep cookie-flags session-hijacking
-
Updated
Jun 28, 2019 - JavaScript
MySQLSessionHandler Class (PHP 7.1)
mysql php php7 session sessionstorage session-management mysqli session-handler session-fixation php-class session-hijacking sessionhandler-interface
-
Updated
Apr 20, 2019 - PHP
This repository demonstrates a privilege escalation attack targeting Open5GS's WebUI, exploiting unauthenticated database connections and forged session cookies/JWT tokens. The analysis reveals critical vulnerabilities in authentication mechanisms, offering insights for securing 5G network components.
-
Updated
Jun 12, 2025 - Python
Demo tool for hijacking TCP sessions
-
Updated
Jun 6, 2021 - C++
Hands-on TCP/IP attack lab covering SYN Flooding, TCP RST Attack, Session Hijacking, and Reverse Shell - performed in an isolated SEED Labs virtual environment. MS Cybersecurity | NUCES Islamabad.
python cybersecurity wireshark scapy tcp-ip ethical-hacking network-security syn-flood session-hijacking seed-labs
-
Updated
Mar 4, 2026 - C
A red and purple team utility for extracting, encrypting, and simulating browser session hijacking scenarios on Windows endpoints. Designed for training, research, and detection development.
-
Updated
Sep 19, 2025 - Python
Full-spectrum browser data extraction and session hijacking toolkit.
-
Updated
May 18, 2026 - Python
Add this topic to your repo
To associate your repository with the session-hijacking topic, visit your repo's landing page and select "manage topics."