RhinoSecurityLabs / CVEs

Related projects ⓘ

Alternatives and complementary repositories for CVEs

• wagiro / BurpBounty
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…
  ☆1,679Updated 6 months ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆481Updated 10 months ago
• alphaSeclab / awesome-burp-suite
  Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.
  ☆1,001Updated 4 years ago
• nccgroup / BurpSuiteHTTPSmuggler
  A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
  ☆708Updated 5 years ago
• luisfontes19 / xxexploiter
  Tool to help exploit XXE vulnerabilities
  ☆542Updated last year
• swisskyrepo / SSRFmap
  Automatic SSRF fuzzer and exploitation tool
  ☆2,986Updated 4 months ago
• d3vilbug / HackBar
  HackBar plugin for Burpsuite
  ☆1,535Updated 3 years ago
• cujanovic / SSRF-Testing
  SSRF (Server Side Request Forgery) testing resources
  ☆2,343Updated 3 weeks ago
• incredibleindishell / SSRF_Vulnerable_Lab
  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  ☆668Updated last year
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆846Updated 2 years ago
• chenjj / CORScanner
  🎯 Fast CORS misconfiguration vulnerabilities scanner
  ☆1,045Updated 2 years ago
• nccgroup / LoggerPlusPlus
  Advanced Burp Suite Logging Extension
  ☆626Updated 5 months ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆508Updated 9 months ago
• PortSwigger / http-request-smuggler
  ☆957Updated 10 months ago
• enjoiz / XXEinjector
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,537Updated 4 years ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆803Updated 2 years ago
• synacktiv / HopLa
  HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite
  ☆711Updated 3 years ago
• m4ll0k / Atlas
  Quick SQLMap Tamper Suggester
  ☆1,343Updated 2 years ago
• irsdl / IIS-ShortName-Scanner
  latest version of scanners for IIS short filename (8.3) disclosure vulnerability
  ☆1,446Updated last year
• s0md3v / Bolt
  CSRF Scanner
  ☆547Updated 4 months ago
• DiogoMRSilva / websitesVulnerableToSSTI
  Simple websites vulnerable to Server Side Template Injections(SSTI)
  ☆373Updated last year
• projectdiscovery / nuclei-burp-plugin
  Nuclei plugin for BurpSuite
  ☆1,190Updated last month
• gquere / pwn_jenkins
  Notes about attacking Jenkins servers
  ☆1,961Updated 3 months ago
• InitRoot / BurpJSLinkFinder
  Burp Extension for a passive scanning JS files for endpoint links.
  ☆742Updated 7 months ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆608Updated 8 months ago
• orangetw / awesome-jenkins-rce-2019
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆603Updated 5 years ago
• worawit / CVE-2021-3156
  Sudo Baron Samedit Exploit
  ☆737Updated 2 years ago
• foobarto / redteam-notebook
  Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
  ☆432Updated 3 years ago
• stamparm / identYwaf
  Blind WAF identification tool
  ☆613Updated 4 months ago
• tarunkant / Gopherus
  This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
  ☆2,867Updated last year