Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
-
Updated
Aug 1, 2022 - Java
#
account-takeover
Here are 62 public repositories matching this topic...
mapAccountHijack is a tool designed to carry out a MAP Account hijack attack, which exploits the Message Access Profile (MAP) in Bluetooth Classic, enables the theft of MFA and OTPs leading to the successful hijacking of accounts on services that rely on SMS OTPs during login or recovery. Tool leaks phone numbers, emails, can send and retrieve SMS
security exploit hacking bluetooth penetration-testing pentesting information-security security-tools account-takeover wireless-security red-teaming bluetooth-security redteam-tools bluetooth-hacking bluetooth-classic
-
Updated
Feb 1, 2025 - Python
Exploit for KeyCloak CVE-2026-18963
security oauth2 keycloak exploit penetration-testing poc vulnerability authentication-bypass account-takeover cve-2026-18963
-
Updated
Aug 20, 2026 - Python
Welcome to the world of FingerprintJS open source software.
-
Updated
Nov 8, 2024
Instagram Penetration Testing and 2FA Detection
instagram security-audit authentication bruteforce cybersecurity penetration-testing infosec mobile-security two-factor-authentication 2fa ethical-hacking security-tools social-engineering password-cracking account-security security-testing account-takeover password-security credential-stuffing instagram-security
-
Updated
Sep 3, 2025 - Python
Go tool that detects which email addresses have domains which are able to be registered
go golang security osint email bug-bounty infosec pentesting bugbounty cyber account-takeover redteam redteam-tools
-
Updated
May 15, 2024 - Go
🔴 CVE-2026-22794 - Appsmith Password Reset Account Takeover via Origin Header Injection | PoC Exploit + Nuclei Template
penetration-testing poc bug-bounty security-tools account-takeover appsmith cve-2026-22794 origin-injection
-
Updated
Jan 23, 2026 - Python
Analyse et modélisation d’un système de détection de fraude (Account Takeover) pour repérer les connexions suspectes et comportements anormaux.
scikit-learn pandas cybersecurity matplotlib mlp thresholding fraud-detection imbalanced-learning account-takeover shap
-
Updated
Jan 25, 2026 - Jupyter Notebook
27 hands-on web vulnerability playbooks for bug bounty hunters, pentesters, and red teamers. Covers IDOR, SSRF, XSS, RCE, ATO, 2FA bypass, OAuth, JWT, file upload, business logic, rate limit, CSRF, SQLi, and more- with payloads and bypass tables.
xss owasp cheatsheet cybersecurity rce bug-bounty infosec web-security pentesting appsec payloads bugcrowd ssrf hackerone account-takeover redteam idor vulnerability-checklist
-
Updated
Jun 14, 2026
CVE-2026-40487 - Postiz <= 2.21.5 - Arbitrary File Upload via MIME-Type Spoofing → Stored XSS → Account Takeover
security exploit file-upload xss poc vulnerability cve account-takeover stored-xss postiz mime-spoofing cve-2026-40487
-
Updated
Apr 22, 2026 - Python
Software that blocks account hijacking attacks.
python security web-security python-3 account-security account-hijacking account-takeover continuous-authentication
-
Updated
Sep 3, 2026 - Python
Xboard / V2Board Unauth Account Takeover - Magic Link Token Leak (CVE-2026-39912)
security proof-of-concept exploit xboard authentication-bypass account-takeover v2board cve-2026-39912
-
Updated
Apr 9, 2026 - Python
AI-based Early Warning System for Account Takeover (ATO) Detection using Machine Learning and Cybersecurity Analytics.
-
Updated
Jul 7, 2026 - JavaScript
Recovery and containment guide for hacked WhatsApp, Instagram, Google, and social-media accounts.
-
Updated
Jul 20, 2026
Multi-vendor login risk engine (ThreatMetrix + BioCatch + LexisNexis): XGBoost ATO scoring, SHAP governance, and a threshold-tunable Allow/MFA/Block policy layer.
-
Updated
Aug 14, 2026 - Python
Top Account Takeover Protection 🌟 Star if you like it! 🌟
-
Updated
Aug 23, 2026
Deduce — independent third-party profile of a public API surface, by API Evangelist. Deduce is a New York City-based identity intelligence and fraud-prevention company focused on detecting stolen and synthetic identities, including the rapidly growing class of AI-generated identities used to bypass traditional Know Your Customer and onboarding cont
identity payments artificial-intelligence onboarding fintech banking fraud-prevention kyc account-takeover risk-scoring apis-json identity-graph synthetic-identity new-account-fraud checkout-fraud genai-fraud
-
Updated
Sep 4, 2026
The application contained a broken password reset implementation that failed to properly validate the relationship between the password reset request and the intended user account. By manipulating user-controlled parameters during the reset process, it was possible to reset another user's password without proper authorization.
bug-bounty application-security business-logic password-reset owasp-top-10 web-application-security account-takeover security-research broken-authentication burp-suite manual-testing
-
Updated
Jul 4, 2026
Risk-based emergency transaction lock framework for compromised accounts and fraud prevention.
payments fraud-prevention fraud-detection account-takeover risk-engine financial-crime merchant-risk transaction-monitoring
-
Updated
Aug 3, 2026 - HTML
Official Python client for Kaidn, the fraud and abuse scoring API. Score a signup, login or checkout and get allow/review/block with the reasons. Zero dependencies.
python sdk disposable-email api-client python3 fraud-prevention bot-detection fraud-detection anti-fraud chargeback vpn-detection ip-reputation account-takeover proxy-detection risk-scoring payment-fraud device-fingerprinting
-
Updated
Aug 22, 2026 - Python
Add this topic to your repo
To associate your repository with the account-takeover topic, visit your repo's landing page and select "manage topics."