GoSecure / xxe-workshop
Workshop given at Hack in Paris 2019
☆121Updated last year
Alternatives and similar repositories for xxe-workshop
Users that are interested in xxe-workshop are comparing it to the libraries listed below
Sorting:
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆132Updated 4 years ago
- Searching for virtual hosts among non-resolvable domains☆88Updated 5 years ago
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆164Updated 4 years ago
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆65Updated 4 years ago
- ☆76Updated 4 years ago
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆75Updated 2 years ago
- Vulnerable SAML infrastructure training applicaiton☆53Updated 2 years ago
- Wordlist to bruteforce for LFI☆123Updated 5 years ago
- ☆148Updated 3 years ago
- ☆166Updated 3 years ago
- Check AWS S3 instances for read/write/delete access☆121Updated 3 years ago
- A Burp Suite Extension for parsing Project Files from the CLI.☆87Updated 7 months ago
- Custom scripts for the PIPER Burp extensions.☆98Updated last year
- Burp Extension that copies a request and builds a FFUF skeleton☆111Updated last year
- Burp Bounty profiles☆82Updated 3 years ago
- LFI Payloads List coolected from github repos☆78Updated 5 years ago
- ☆44Updated 3 years ago
- NotSoCereal: A Deserialization exploit playground☆52Updated 3 years ago
- Clientside vulnerability / reflected xss fuzzer☆150Updated last year
- ☆59Updated 10 months ago
- ☆44Updated 4 years ago
- Adds a customizable "Send to..."-context-menu to your BurpSuite.☆156Updated 2 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆119Updated last year
- Collection of quirky behaviours of code and the CTF challenges that I made around them.☆27Updated 4 years ago
- Detects request smuggling via HTTP/2 downgrades.☆92Updated 2 years ago
- This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities☆91Updated last year
- Client-Side Prototype Pollution Tools☆84Updated 3 years ago
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆36Updated 2 years ago
- ☆65Updated 2 years ago
- Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.☆125Updated 2 years ago