Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.
☆128Jan 10, 2023Updated 3 years ago
Alternatives and similar repositories for template-injection-workshop
Users that are interested in template-injection-workshop are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Workshop given at Hack in Paris 2019☆126Jun 8, 2023Updated 3 years ago
- bruteforce the admin panel☆15Jun 6, 2018Updated 8 years ago
- Random utilities from my security projects that might be useful to others☆183Jan 26, 2025Updated last year
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.☆218Nov 3, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cobalt Strike 的 CVE-2024-35250 的 BOF。(请给我加个星，谢谢。)☆13Oct 21, 2024Updated 2 years ago
- Client Side Prototype Pollution Scanner☆532Sep 17, 2022Updated 4 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- a tool that compiles a csv of all h1 program stats☆49Jul 2, 2023Updated 3 years ago
- 本程序在后台持续运行，通过headless chrome获取hackerone最新漏洞，发送邮件给安全人员。☆16Oct 3, 2026Updated 3 weeks ago
- This program aims to check active targets by saving screenshots in a project.☆14Jan 9, 2026Updated 9 months ago
- ☆10Sep 7, 2026Updated last month
- The project aims at creating target-specific wordlists for any web application that you are testing.☆66May 28, 2022Updated 4 years ago
- A tool to find redirection chains in multiple URLs☆79Jan 1, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆44Jul 23, 2021Updated 5 years ago
- Material from presentations done by GoSecure researchers☆34Oct 10, 2023Updated 3 years ago
- ☆29Jan 10, 2023Updated 3 years ago
- ☆13Jan 3, 2021Updated 5 years ago
- My CTF Challenges☆16Nov 6, 2024Updated last year
- ☆66Aug 25, 2021Updated 5 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆996Dec 31, 2021Updated 4 years ago
- Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)☆85Apr 5, 2021Updated 5 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆11Apr 9, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Urls status code & content length checker☆145Oct 1, 2020Updated 6 years ago
- ☆18Oct 30, 2022Updated 3 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆358Oct 14, 2020Updated 6 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆619Mar 4, 2021Updated 5 years ago
- Spring Boot Actuator + Spring Cloud Vul Env☆19Dec 25, 2019Updated 6 years ago
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- List DTDs and generate XXE payloads using those local DTDs.☆664Feb 21, 2024Updated 2 years ago
- ☆701Jul 4, 2022Updated 4 years ago
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- This tool downloads, installs, and configures a shiny new copy of Chromium.☆484Apr 3, 2024Updated 2 years ago
- Return domains in CSP headers in http response☆16Aug 17, 2021Updated 5 years ago
- Several XStream gadgets ported from ysoserial☆33Sep 26, 2021Updated 5 years ago
- OWASP Amass data source scripts (assetfinder, findomain, github, subfinder)☆106Oct 18, 2020Updated 6 years ago
- Burp extension to decode NTLM SSP headers and extract domain/host information☆31Mar 11, 2021Updated 5 years ago
- PowerShell module providing utility commands to manipulate a APK file on Windows☆16Apr 14, 2025Updated last year
- Tool to extract & validate google fcm server keys from apks☆31Jan 20, 2021Updated 5 years ago