Corb3nik / SQLi-CTF

Related projects ⓘ

Alternatives and complementary repositories for SQLi-CTF

• m6a-UdS / ssrf-lab
  Lab for exploring SSRF vulnerabilities
  ☆245Updated 3 years ago
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆344Updated 2 years ago
• joernchen / xxeserve
  XXE Out of Band Server.
  ☆169Updated last year
• lc / 230-OOB
  An Out-of-Band XXE server for retrieving file contents over FTP.
  ☆174Updated 4 years ago
• kacperszurek / exploits
  ☆259Updated 5 years ago
• summitt / burp-ysoserial
  YSOSERIAL Integration with burp suite
  ☆162Updated last year
• NytroRST / XSSFuzzer
  XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
  ☆138Updated 5 years ago
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆511Updated 4 years ago
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆326Updated 10 months ago
• NotSoSecure / docker_fetch
  Data extraction tool for Docker Registry API
  ☆123Updated 9 months ago
• PortSwigger / hackvertor
  ☆88Updated 9 months ago
• SniperOJ / Jeopardy-Dockerfiles
  Dockerfiles of CTF Challenges running on SniperOJ
  ☆148Updated last year
• irsdl / httpninja
  HTTP.ninja
  ☆147Updated last year
• opnsec / postMessage-logger
  Simple "postMessage logger" Chrome extension
  ☆92Updated 4 years ago
• h3xstream / http-script-generator
  ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)
  ☆289Updated last year
• emadshanab / facebook-bug-bounty-writeups
  Facebook Bug Bounties
  ☆101Updated 3 years ago
• PortSwigger / upload-scanner
  HTTP file upload scanner for Burp Proxy
  ☆397Updated last year
• digininja / nosqlilab
  A lab for playing with NoSQL Injection
  ☆128Updated 4 years ago
• NickstaDB / DeserLab
  Java deserialization exploitation lab.
  ☆237Updated 5 years ago
• PortSwigger / js-link-finder
  Burp Extension for a passive scanning JS files for endpoint links.
  ☆162Updated 5 years ago
• lc / theftfuzzer
  TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
  ☆308Updated last year
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆250Updated last year
• pimps / CVE-2018-7600
  Exploit for Drupal 7 <= 7.57 CVE-2018-7600
  ☆130Updated 6 years ago
• ozzi- / JWT4B
  JWT Support for Burp
  ☆248Updated 3 months ago
• p3n73st3r / Ghazi
  Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…
  ☆109Updated 5 years ago
• httpvoid / CVE-Reverse
  ☆278Updated 3 years ago
• DiogoMRSilva / websitesVulnerableToSSTI
  Simple websites vulnerable to Server Side Template Injections(SSTI)
  ☆374Updated last year
• veracode-research / spring-view-manipulation
  When MVC magic turns black
  ☆286Updated 4 years ago
• PortSwigger / command-injection-attacker
  SHELLING - a comprehensive OS command injection payload generator
  ☆107Updated 5 years ago
• securitum / research
  research
  ☆150Updated 8 months ago