Search Results for "site attacks"

Lapis is a framework for building web applications in Lua (or MoonScript) that primarily targets OpenResty, a high-performance web platform that runs on a customized version of Nginx. Lapis can also be used in other server environments, being compatible with any modern version of Lua. With OpenResty, Lua is run directly inside of the Nginx worker using LuaJIT, giving you the smallest barrier between the webserver and your code. Have a look at Web Framework Benchmarks just to see how...

...The current implementation is written in Go and includes its own HTTP and DNS server components. Site-specific behavior is defined through modular phishing-site configurations known as phishlets. The project is intended for authorized penetration testing, red-team exercises, and defensive research into phishing-resistant authentication. Its capabilities can enable credential theft if misused, so testing should be restricted to systems and users covered by explicit permission.

An electrode plugin that enables stateless CSRF protection using JWT in Electrode, Express, Hapi, or Koa 2 applications. CSRF protection is an important security feature, but in systems which don't have backend session persistence, validation is tricky. Stateless CSRF support addresses this need. CSRF attacks can be bad when a malicious script can make a request that can perform harmful operations through the user (victim)'s browser, attaching user-specific and sensitive data in the cookies....