Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
-
Updated
Aug 1, 2022 - Java
#
account-takeover
Here are 84 public repositories matching this topic...
mapAccountHijack is a tool designed to carry out a MAP Account hijack attack, which exploits the Message Access Profile (MAP) in Bluetooth Classic, enables the theft of MFA and OTPs leading to the successful hijacking of accounts on services that rely on SMS OTPs during login or recovery. Tool leaks phone numbers, emails, can send and retrieve SMS
security exploit hacking bluetooth penetration-testing pentesting information-security security-tools account-takeover wireless-security red-teaming bluetooth-security redteam-tools bluetooth-hacking bluetooth-classic
-
Updated
Feb 1, 2025 - Python
Exploit for KeyCloak CVE-2026-18963
security oauth2 keycloak exploit penetration-testing poc vulnerability authentication-bypass account-takeover cve-2026-18963
-
Updated
Aug 20, 2026 - Python
Welcome to the world of FingerprintJS open source software.
-
Updated
Nov 8, 2024
A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome process memory, and the decryption of synced GPM passkeys for Account Takeover.
windows chrome offensive-security account-takeover security-research google-password-manager credential-extraction
-
Updated
Nov 4, 2026 - C
Instagram Penetration Testing and 2FA Detection
instagram security-audit authentication bruteforce cybersecurity penetration-testing infosec mobile-security two-factor-authentication 2fa ethical-hacking security-tools social-engineering password-cracking account-security security-testing account-takeover password-security credential-stuffing instagram-security
-
Updated
Sep 3, 2025 - Python
Go tool that detects which email addresses have domains which are able to be registered
go golang security osint email bug-bounty infosec pentesting bugbounty cyber account-takeover redteam redteam-tools
-
Updated
May 15, 2024 - Go
🔴 CVE-2026-22794 - Appsmith Password Reset Account Takeover via Origin Header Injection | PoC Exploit + Nuclei Template
penetration-testing poc bug-bounty security-tools account-takeover appsmith cve-2026-22794 origin-injection
-
Updated
Jan 23, 2026 - Python
27 hands-on web vulnerability playbooks for bug bounty hunters, pentesters, and red teamers. Covers IDOR, SSRF, XSS, RCE, ATO, 2FA bypass, OAuth, JWT, file upload, business logic, rate limit, CSRF, SQLi, and more- with payloads and bypass tables.
xss owasp cheatsheet cybersecurity rce bug-bounty infosec web-security pentesting appsec payloads bugcrowd ssrf hackerone account-takeover redteam idor vulnerability-checklist
-
Updated
Jun 14, 2026
Analyse et modélisation d’un système de détection de fraude (Account Takeover) pour repérer les connexions suspectes et comportements anormaux.
scikit-learn pandas cybersecurity matplotlib mlp thresholding fraud-detection imbalanced-learning account-takeover shap
-
Updated
Jan 25, 2026 - Jupyter Notebook
CVE-2026-40487 - Postiz <= 2.21.5 - Arbitrary File Upload via MIME-Type Spoofing → Stored XSS → Account Takeover
security exploit file-upload xss poc vulnerability cve account-takeover stored-xss postiz mime-spoofing cve-2026-40487
-
Updated
Apr 22, 2026 - Python
A deep-dive technical reconstruction and impact analysis of CVE-2026-8206—a critical CVSS 9.8 unauthenticated account takeover vulnerability in the WordPress Kirki plugin, featuring proof-of-concept validation, detection strategies, and mitigation frameworks. 🛡️
wordpress-plugin proof-of-concept application-security wordpress-security privilege-escalation vulnerability-analysis account-takeover api-security cve-2026-8206
-
Updated
Oct 6, 2026
CVE-2026-107181 Proof Of Concept for telegram Desktop account take over in windows
windows research telegram proof-of-concept exploit windows-10 poc vulnerability vulnerabilities account-takeover vulnerability-research windows-11 cve-2026-107181
-
Updated
Oct 13, 2026 - JavaScript
Login risk scoring: account-takeover and attack-IP models trained on the 31M-login RBA dataset, plus an impossible-travel check.
-
Updated
Nov 5, 2026 - Python
Software that blocks account hijacking attacks.
python security web-security python-3 account-security account-hijacking account-takeover continuous-authentication
-
Updated
Nov 5, 2026 - Python
Xboard / V2Board Unauth Account Takeover - Magic Link Token Leak (CVE-2026-39912)
security proof-of-concept exploit xboard authentication-bypass account-takeover v2board cve-2026-39912
-
Updated
Apr 9, 2026 - Python
Account takeover, credential stuffing, session and inventory abuse detection for game platforms: signal catalog, SQL detections, scoring.
-
Updated
Sep 25, 2026 - Python
Two-head login risk engine — gradient-boosted credential-stuffing detection plus per-user takeover scoring, calibrated as percentiles. FastAPI service, analyst console, 160 tests.
python redis security machine-learning authentication mcp scikit-learn cybersecurity feature-engineering fraud-detection anomaly-detection account-takeover credential-stuffing fastapi risk-based-authentication prompt-injection
-
Updated
Oct 27, 2026 - Python
AI-based Early Warning System for Account Takeover (ATO) Detection using Machine Learning and Cybersecurity Analytics.
-
Updated
Jul 7, 2026 - JavaScript
Identity fraud and account takeover detection with 3 ML models, imbalanced-class evaluation and CLI batch scoring
-
Updated
Sep 20, 2026 - Python
Add this topic to your repo
To associate your repository with the account-takeover topic, visit your repo's landing page and select "manage topics."