rest-api-security

The security visibility layer for WordPress, providing activity logging, audit trails, threat detection, suspicious request monitoring, core file integrity, file forensics, quarantine management, custom login protection, and REST API hardening without requiring an external account or cloud service.

Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shafiei (EbraSha) for cybersecurity research, penetration testing, and WordPress security assessment.

Pluggable Flask decorators for encrypting/decrypting request and response payloads

Pluggable FastAPI decorators for encrypting/decrypting request and response payloads

Pluggable Django decorators for encrypting/decrypting request and response payloads

Laboratório de Segurança Backend: Implementação de Autenticação e Autorização Stateless utilizando Spring Security 3.x, JWT (JSON Web Tokens) e criptografia BCrypt.

Spring: Simple Employee directory REST CRUD API

PoC detector & safe validator for the WP2Shell WordPress vulnerability chain: CVE-2026-63030 (REST batch-route confusion) + CVE-2026-60137 (author__not_in SQL injection). For authorized security testing only.

A Spring Boot 4.0 project demonstrating the new Spring Security 6 Functional DSL. Features In-Memory authentication with BCrypt, CSRF management, and multi-modal login (Form + Basic).

Research artifact for the JSS 2026 paper on Prompt-to-API-Call (P2A) injection attacks against LLM agents: 52 attack vectors across 5 REST backends (260 scenarios), five defenses (D1-D5), and the D5 Semantic Intent Validator. Includes the harness, attack corpus, and all result data.