🔪Browser logic vulnerabilities
☆703Jan 23, 2021Updated 5 years ago
Alternatives and similar repositories for uxss-db
Users that are interested in uxss-db are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of JavaScript engine CVEs with PoCs☆2,320Sep 3, 2019Updated 7 years ago
- My Chrome and Safari exploit code + write-up repo☆534Nov 5, 2021Updated 4 years ago
- awesome list of browser exploitation tutorials☆2,304Sep 18, 2023Updated 3 years ago
- DOM fuzzer☆1,785Nov 26, 2024Updated last year
- SSRF (Server Side Request Forgery) testing resources☆2,507Oct 12, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A Javascript library for browser exploitation☆905Feb 12, 2019Updated 7 years ago
- Browser's XSS Filter Bypass Cheat Sheet☆1,160May 6, 2017Updated 9 years ago
- A JavaScript Engine Fuzzer☆2,350Updated this week
- A Collection of Chrome Sandbox Escape POCs/Exploits for learning☆869Jun 4, 2020Updated 6 years ago
- An updated collection of resources targeting browser-exploitation.☆831Mar 8, 2021Updated 5 years ago
- The Harvest of V8 regress.☆137Jul 18, 2020Updated 6 years ago
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆215Aug 17, 2017Updated 9 years ago
- A tiny and cute URL fuzzer☆402Nov 10, 2022Updated 3 years ago
- poc or exp of android vulnerability☆407Dec 30, 2017Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Java-Web-Security - Sichere Webanwendungen mit Java entwickeln☆222Updated this week
- A collection of curated Java Deserialization Exploits☆592May 16, 2021Updated 5 years ago
- Code-Audit-Challenges☆982Nov 17, 2018Updated 7 years ago
- ✍️ A curated list of CVE PoCs.☆3,535Jan 4, 2022Updated 4 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,186May 26, 2023Updated 3 years ago
- FileReader Exploit☆255Mar 20, 2019Updated 7 years ago
- There is no pre-auth RCE in Jenkins since May 2017, but this is the one!☆608May 17, 2019Updated 7 years ago
- ☆73Jan 25, 2018Updated 8 years ago
- Analysis of public exploits or my 1day exploits☆616Oct 1, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Apache Solr Injection Research☆580Jan 28, 2020Updated 6 years ago
- Fuzzing Browsers☆318Dec 5, 2022Updated 3 years ago
- A collection of browser-based side channel attack vectors.☆758Mar 19, 2024Updated 2 years ago
- OpenSource My ImageMagick Fuzzer ..☆296Jul 26, 2017Updated 9 years ago
- ☆461Oct 4, 2020Updated 6 years ago
- 🐽 Detection version of framework \ CMS \ dev-dependence on target website.☆98Feb 11, 2019Updated 7 years ago
- ☆34Nov 4, 2018Updated 7 years ago
- Vulnerability Labs for security analysis☆1,165Mar 10, 2021Updated 5 years ago
- ☆519Feb 22, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Java serializer in JavaScript☆80May 21, 2018Updated 8 years ago
- Proof of concept written in Python to show that in some situations a SSRF vulnerability can be used to steal NTLMv1/v2 hashes.☆57Dec 18, 2017Updated 8 years ago
- ☆384Jan 12, 2024Updated 2 years ago
- Collection of CTF Web challenges I made☆2,858Aug 31, 2025Updated last year
- A Pwn2Own exploit chain☆760Nov 8, 2018Updated 7 years ago
- Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.☆625Jun 13, 2020Updated 6 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆517Jul 29, 2020Updated 6 years ago