Metnew / uxss-dbLinks
πͺBrowser logic vulnerabilities
β697Updated 4 years ago
Alternatives and similar repositories for uxss-db
Users that are interested in uxss-db are comparing it to the libraries listed below
Sorting:
- A tiny and cute URL fuzzerβ402Updated 3 years ago
- Some of my exploits.β597Updated 4 years ago
- Cure53 Browser Security White Paperβ300Updated 8 years ago
- There is no pre-auth RCE in Jenkins since May 2017, but this is the one!β606Updated 6 years ago
- β266Updated 6 years ago
- Apache Solr Injection Researchβ579Updated 5 years ago
- A collection of curated Java Deserialization Exploitsβ592Updated 4 years ago
- SHELLING - a comprehensive OS command injection payload generatorβ444Updated 5 years ago
- β425Updated 8 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.β345Updated 3 years ago
- Content hijacking proof-of-concept using Flash, PDF and Silverlightβ384Updated 6 years ago
- Browser's XSS Filter Bypass Cheat Sheetβ1,150Updated 8 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scansβ583Updated 4 years ago
- My Chrome and Safari exploit code + write-up repoβ531Updated 4 years ago
- ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)β297Updated 2 years ago
- Fuzzing Browsersβ314Updated 3 years ago
- Hunting Bugs for Fun and Profitβ272Updated 5 years ago
- A tool for embedding XXE/XML exploits into different filetypesβ1,123Updated last year
- A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causβ¦β440Updated 9 months ago
- SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.β478Updated 8 years ago
- A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniquesβ737Updated 6 years ago
- Collection of bypass gadgets to extend and wrap ysoserial payloadsβ384Updated 3 years ago
- Java RMI enumeration and attack tool.β741Updated 8 years ago
- Lab for exploring SSRF vulnerabilitiesβ247Updated 4 years ago
- HTTP file upload scanner for Burp Proxyβ491Updated 2 years ago
- poc or exp of android vulnerabilityβ407Updated 8 years ago
- exploit for ImageMagick's uninitialized memory disclosure in gif coderβ285Updated 8 years ago
- From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extrasβ425Updated 5 years ago
- β709Updated last year
- CTF writeups from Balsnβ473Updated 3 years ago