Search results

Bug: target_id filter silently ignored in get_plugin_output_dicts() filter result not assigned

Status: Open.

#1387 In owtf/owtf;

· piyush140104 opened on Mar 8, 2026

subdomain_takeover.sh: hardcoded paths, race condition, and output files not saved to plugin output directory

Status: Open.

#1381 In owtf/owtf;

· abhaybansal16 opened on Mar 5, 2026

Use of bcrypt.hashpw() for password verification exposes login to timing attacks

Status: Open.

#1378 In owtf/owtf;

· piyush140104 opened on Mar 4, 2026

Bug: AttributeError crash in activate_user() and change_password() when user not found

Status: Open.

#1376 In owtf/owtf;

· piyush140104 opened on Mar 3, 2026

Implement async plugin execution for 2-3x performance improvement

Status: Open.

#1375 In owtf/owtf;

· abhaybansal16 opened on Mar 2, 2026

Proxy Page UI Improvements

Status: Open.

#1374 In owtf/owtf;

· piyush140104 opened on Feb 26, 2026

Add/update documentation for [specific feature/bug/Windows support/etc.

Status: Open.

#1373 In owtf/owtf;

· saitejareddy05 opened on Feb 20, 2026

no SSRF plugin at all

Status: Open.

#1372 In owtf/owtf;

· avinxshKD opened on Feb 19, 2026

Add Security Headers Audit grep plugin (OWTF-WGP-003)

Status: Open.

#1371 In owtf/owtf;

· avinxshKD opened on Feb 19, 2026

New database engine created on every HTTP request causes connection churn and repeated schema checks

Status: Open.

#1362 In owtf/owtf;

· avinxshKD opened on Feb 15, 2026

JWT_SECRET_KEY defined after settings override user config is silently ignored

Status: Open.

#1361 In owtf/owtf;

· avinxshKD opened on Feb 15, 2026

Auth handlers missing return after self.success() causes RuntimeError on invalid input

Status: Open.

#1360 In owtf/owtf;

· avinxshKD opened on Feb 15, 2026