Email-Analysis-Toolkit / command-injection-testerLinks
☆19Updated last year
Alternatives and similar repositories for command-injection-tester
Users that are interested in command-injection-tester are comparing it to the libraries listed below
Sorting:
- POC for RCE vulnerability in ParseExcel library, and ParseXLSX too, as a depending library☆18Updated last year
- A curated list of argument injection vectors☆41Updated last year
- PyRASP is a Runtime Application Self Protection package for Python-based Web Servers (Flask, FastAPI and Django), Serverless Functions (A…☆33Updated 2 months ago
- Tools for finding SMTP smuggling vulnerabilities.☆144Updated last year
- Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing☆134Updated last year
- ☆105Updated last month
- ☆116Updated 2 years ago
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆46Updated 2 years ago
- jws2pubkey tool☆43Updated 7 months ago
- xortigate-cve-2023-27997☆65Updated 2 years ago
- Utility for creating ZipSlip archives☆80Updated 2 years ago
- Citrix Scanner for CVE-2023-3519☆53Updated 2 years ago
- ☆51Updated 3 years ago
- A blazing fast and fully configurable Blind SQL Injection optimization and automation framework.☆140Updated 7 months ago
- A PoC exploit for CVE-2022-41622 - a CSRF in F5 BIG-IP control plane that leads to remote root☆21Updated 3 years ago
- GTFOArgs is a curated list of programs and their associated arguments that can be exploited to gain privileged access or execute arbitrar…☆140Updated 3 months ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆23Updated 4 years ago
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆109Updated 7 months ago
- Pre-Auth Blind NoSQL Injection leading to Remote Code Execution in Rocket Chat 3.12.1☆58Updated 2 years ago
- ☆16Updated 2 months ago
- Determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface.☆128Updated last year
- ☆21Updated 4 months ago
- CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server☆123Updated 3 years ago
- A collection of my Semgrep rules☆51Updated 2 years ago
- Left To My Own Devices - NT hash tools☆40Updated 3 years ago
- NotSoCereal: A Deserialization exploit playground☆54Updated 4 years ago
- Upload files done during my research.☆169Updated last month
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆36Updated 10 months ago
- ☆45Updated 3 years ago
- Privilege escalation using dmidecode☆21Updated 6 years ago