Modern Web Firewall: stop account takeovers, weak passwords, cloud IPs, DoS attacks, disposable emails
-
Updated
Aug 1, 2022 - Java
#
account-takeover
Here are 18 public repositories matching this topic...
mapAccountHijack is a tool designed to carry out a MAP Account hijack attack, which exploits the Message Access Profile (MAP) in Bluetooth Classic, enables the theft of MFA and OTPs leading to the successful hijacking of accounts on services that rely on SMS OTPs during login or recovery. Tool leaks phone numbers, emails, can send and retrieve SMS
security exploit hacking bluetooth penetration-testing pentesting information-security security-tools account-takeover wireless-security red-teaming bluetooth-security redteam-tools bluetooth-hacking bluetooth-classic
-
Updated
Feb 1, 2025 - Python
Welcome to the world of FingerprintJS open source software.
-
Updated
Nov 8, 2024
Instagram Penetration Testing and 2FA Detection
instagram security-audit authentication bruteforce cybersecurity penetration-testing infosec mobile-security two-factor-authentication 2fa ethical-hacking security-tools social-engineering password-cracking account-security security-testing account-takeover password-security credential-stuffing instagram-security
-
Updated
Sep 3, 2025 - Python
Go tool that detects which email addresses have domains which are able to be registered
go golang security osint email bug-bounty infosec pentesting bugbounty cyber account-takeover redteam redteam-tools
-
Updated
May 15, 2024 - Go
🔴 CVE-2026-22794 - Appsmith Password Reset Account Takeover via Origin Header Injection | PoC Exploit + Nuclei Template
penetration-testing poc bug-bounty security-tools account-takeover appsmith cve-2026-22794 origin-injection
-
Updated
Jan 23, 2026 - Python
Analyse et modélisation d’un système de détection de fraude (Account Takeover) pour repérer les connexions suspectes et comportements anormaux.
scikit-learn pandas cybersecurity matplotlib mlp thresholding fraud-detection imbalanced-learning account-takeover shap
-
Updated
Jan 25, 2026 - Jupyter Notebook
Software that blocks account hijacking attacks.
python security web-security python-3 account-security account-hijacking account-takeover continuous-authentication
-
Updated
Apr 20, 2026 - Python
CVE-2026-40487 - Postiz <= 2.21.5 - Arbitrary File Upload via MIME-Type Spoofing → Stored XSS → Account Takeover
security exploit file-upload xss poc vulnerability cve account-takeover stored-xss postiz mime-spoofing cve-2026-40487
-
Updated
Apr 22, 2026 - Python
CVE-2020-13654 - XWiki Platform < 12.8 - Stored XSS → CSRF → Account Takeover
security exploit xss csrf cve xwiki account-takeover cross-site-scripting cross-site-request-forgery stored-xss cve-2020-13654
-
Updated
Apr 16, 2026 - Python
Security research write-up on MFA fatigue risk in Microsoft Personal accounts when Authenticator sign-in notifications are enabled, including evidence, timeline, and a user-side workaround
-
Updated
Mar 11, 2026
Xboard / V2Board Unauth Account Takeover - Magic Link Token Leak (CVE-2026-39912)
security proof-of-concept exploit xboard authentication-bypass account-takeover v2board cve-2026-39912
-
Updated
Apr 9, 2026 - Python
AuthTables is a microservice that helps detect "Account Take Over" caused by simple credential theft. If bad actors are stealing your users passwords, AuthTables may be useful.
-
Updated
Nov 18, 2020 - Go
Advanced security research lab on BOLA (CWE-285) and IDOR in RESTful architectures. Features a Flask-based API gateway and a Python-engineered exploit engine demonstrating Account Takeover (ATO) via JSON payload manipulation. Includes enterprise remediation strategies using cryptographically signed session claims and server-side authorization.
appsec python-security owasp-top-10 account-takeover api-security idor broken-authorization bola cybersecurity-portfolio rest-api-exploit
-
Updated
Feb 25, 2026 - Python
Detect suspicious login behavior from raw logs. A simplified open-source version of the BlackIce fraud detection engine.
-
Updated
Apr 6, 2026 - Python
Near real-time intrusion detection for blacklisting
-
Updated
Nov 16, 2018
Various bots for testing web applications
-
Updated
Aug 5, 2021 - Go
Structured ML investigation into FastText/Word2Vec device fingerprint embeddings for account takeover detection — from PoC through adversarial debate, three experiments, and production deployment analysis.
-
Updated
Apr 21, 2026 - Python
Improve this page
Add a description, image, and links to the account-takeover topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the account-takeover topic, visit your repo's landing page and select "manage topics."