Workshop given at Hack in Paris 2019
☆126Jun 8, 2023Updated 3 years ago
Alternatives and similar repositories for xxe-workshop
Users that are interested in xxe-workshop are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.☆128Jan 10, 2023Updated 3 years ago
- ☆18Oct 30, 2022Updated 3 years ago
- Scripts and misc. stuff related to the PortSwigger Web Academy☆17Feb 6, 2022Updated 4 years ago
- Exploit scripts☆12Apr 10, 2022Updated 4 years ago
- Material from presentations done by GoSecure researchers☆34Oct 10, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- List DTDs and generate XXE payloads using those local DTDs.☆664Feb 21, 2024Updated 2 years ago
- Minimalist cheat sheet for developpers to write secure code☆54Jul 17, 2020Updated 6 years ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- ☆11Feb 17, 2013Updated 13 years ago
- An easy to navigate list of unicode characters that have risky transformations 💥☆25Mar 22, 2022Updated 4 years ago
- ☆11Jan 24, 2023Updated 3 years ago
- ☆29Jan 10, 2023Updated 3 years ago
- Compiled dataset of Java deserialization CVEs☆60Aug 31, 2020Updated 6 years ago
- Exploit for CVE-2021-3129☆290Jan 29, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Burp extension to show the Collaborator client in a tab☆25Dec 23, 2022Updated 3 years ago
- CVE-2022-32119 - Arox-Unrestricted-File-Upload☆17Dec 20, 2023Updated 2 years ago
- Electro-XSS , a buggy desktop app developed with the Electron framework.☆13Feb 10, 2022Updated 4 years ago
- Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"☆358Oct 14, 2020Updated 6 years ago
- ☆701Jul 4, 2022Updated 4 years ago
- GetSimple CMS Custom JS Plugin Exploit RCE Chain☆11Mar 8, 2023Updated 3 years ago
- Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practis…☆1,718May 24, 2025Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆996Dec 31, 2021Updated 4 years ago
- Custom scripts for the PIPER Burp extensions.☆98Sep 24, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆149Dec 23, 2022Updated 3 years ago
- ☆564Mar 27, 2025Updated last year
- ☆19Jan 24, 2022Updated 4 years ago
- ☆703Nov 27, 2024Updated last year
- A repo for tools, utils, and wrappers that are to small to put in their own repo.☆23Mar 18, 2023Updated 3 years ago
- Client Side Prototype Pollution Scanner☆532Sep 17, 2022Updated 4 years ago
- A simple tool for wide targeting using ASN.☆10Apr 26, 2021Updated 5 years ago
- OWASP Amass data source scripts (assetfinder, findomain, github, subfinder)☆106Oct 18, 2020Updated 6 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- 本程序在后台持续运行，通过headless chrome获取hackerone最新漏洞，发送邮件给安全人员。☆16Oct 3, 2026Updated 3 weeks ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆792Aug 19, 2024Updated 2 years ago
- xss development frameworks, with the goal of making payload writing easier.☆160Aug 7, 2024Updated 2 years ago
- This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location☆1,393Jan 24, 2021Updated 5 years ago
- Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"☆212Mar 9, 2023Updated 3 years ago
- Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…☆409Nov 24, 2020Updated 5 years ago