GoSecure / xxe-workshopLinks
Workshop given at Hack in Paris 2019
☆126Updated 2 years ago
Alternatives and similar repositories for xxe-workshop
Users that are interested in xxe-workshop are comparing it to the libraries listed below
Sorting:
- Burp Extension that copies a request and builds a FFUF skeleton☆112Updated 2 years ago
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆132Updated 4 years ago
- A simple remote scanner for Atlassian Jira☆121Updated 3 years ago
- Searching for virtual hosts among non-resolvable domains☆89Updated 5 years ago
- Wordlist to bruteforce for LFI☆128Updated 6 years ago
- Tools to assess the DNS security of web applications☆128Updated 3 years ago
- ☆170Updated 4 years ago
- The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources☆138Updated 5 years ago
- Clientside vulnerability / reflected xss fuzzer☆149Updated 2 years ago
- Custom scripts for the PIPER Burp extensions.☆98Updated 2 years ago
- This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path☆107Updated 5 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆175Updated last year
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆164Updated 4 years ago
- Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.☆129Updated 3 years ago
- ☆76Updated 5 years ago
- ☆87Updated last year
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆66Updated 5 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Updated 3 years ago
- A Burp Suite Extension for parsing Project Files from the CLI.☆89Updated 3 weeks ago
- Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.☆112Updated 3 years ago
- Misc bounty and vulndisc things☆85Updated 5 years ago
- A combined wordlists for files and directory discovery☆127Updated 4 years ago
- ☆148Updated 3 years ago
- NotSoCereal: A Deserialization exploit playground☆54Updated 4 years ago
- Vulnerable SAML infrastructure training applicaiton☆54Updated 3 years ago
- This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…☆112Updated last year
- ☆45Updated 5 years ago
- Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.☆113Updated 4 years ago
- ☆44Updated 4 years ago
- Check AWS S3 instances for read/write/delete access☆121Updated 3 years ago