Pinned

1. awesome-burp-extensions awesome-burp-extensions Public

   A curated list of amazingly awesome Burp Extensions

   2.8k 573

2. dvws-node dvws-node Public

   Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

   JavaScript 414 165

3. fuzzpayloads fuzzpayloads Public

   Collection of fuzzing payloads and corpus from all around added as sub modules

   13 6

4. rs-async-zip Zip Path Traversal (Zip... rs-async-zip Zip Path Traversal (Zip Slip)

   1

   ### Introduction

   2

   3

   [rs-async-zip](https://github.com/Majored/rs-async-zip) is a asynchronous ZIP archive reading/writing crate with a heavy focus on streaming support. This package is vulnerable to Zip Traversal (Zip Slip).

   4

   5

   **Note:** This issue was privately disclosed to the maintainer. He has stated that he has made conscious decision not to mitigate any sort of traversal attacks within the library itself. He has however added a notice to to the example code https://github.com/Majored/rs-async-zip/commit/08587b8933f80f8a70b4e313313f2fffc22c983a