"Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS
☆14Mar 4, 2017Updated 9 years ago
Alternatives and similar repositories for HttpPwnly
Users that are interested in HttpPwnly are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆49Jul 15, 2019Updated 7 years ago
- My presentations from different conferences☆15Sep 12, 2018Updated 7 years ago
- NTLM HTTP Authentication Session Tier Exploit☆15Jan 9, 2014Updated 12 years ago
- ZeroDay Cyber Research - ZCR Shellcoder Archive - z3r0d4y.com Shellcode Generator☆14Jul 29, 2016Updated 10 years ago
- PoC for an adaptive parallelised DNS prober☆44Oct 4, 2017Updated 8 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Position and velocity PID control of a DC motor using LabView and Arduino☆15Apr 23, 2018Updated 8 years ago
- A simple shell script which utilizes nmap, nikto, dirb, enum4linux and other open source goodies to automate enumeration process.☆19Jan 13, 2022Updated 4 years ago
- CTF Writeups☆16Jul 18, 2017Updated 9 years ago
- Vulnerable Windows Driver with exploits which were used for demonstration purposes on Hunting and exploiting bugs in kernel drivers prese…☆13Jan 29, 2013Updated 13 years ago
- Create one or more monitor-mode virtual wireless interfaces with unique mac addresses.☆13Dec 14, 2018Updated 7 years ago
- MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.☆127Apr 28, 2024Updated 2 years ago
- Generates several metasploit payloads☆15Apr 13, 2018Updated 8 years ago
- A QEMU based framework for instrumenting x86 programs from Python☆17Oct 5, 2020Updated 5 years ago
- Flash crossdomain policy security checker☆26Oct 3, 2015Updated 10 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This script generate backdoor code which log username password of an user who have passed HTTP basic auth using LDAP credentials.☆58Apr 3, 2017Updated 9 years ago
- ☆20Jul 25, 2019Updated 7 years ago
- Automated enumeration☆30Apr 14, 2021Updated 5 years ago
- A lightweight CSRF Toolkit for easy Proof of concept☆173Jun 11, 2014Updated 12 years ago
- ☆13Aug 18, 2016Updated 9 years ago
- Viewstate Hidden Control Enumerator☆17Sep 12, 2013Updated 12 years ago
- Some simple and useful tools☆15May 8, 2018Updated 8 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆139May 25, 2017Updated 9 years ago
- Web Filter External Enumeration Tool (WebFEET)☆78Aug 24, 2014Updated 11 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆31Jun 30, 2013Updated 13 years ago
- This repo contains a list of aws security related talks.☆11Dec 5, 2017Updated 8 years ago
- ☆31Aug 23, 2020Updated 5 years ago
- SharpBuster is a C# implementation of a directory brute forcing tool. It's designed to be used via Cobalt Strike's execute-assembly and s…☆64Sep 2, 2020Updated 5 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆102Jun 1, 2018Updated 8 years ago
- pentest scripts☆20Jul 28, 2020Updated 6 years ago
- Example Material for SecureState's 2016 Python for Pentesters Webinar☆10Dec 13, 2016Updated 9 years ago
- A sub-domain enumeration tool☆20May 18, 2020Updated 6 years ago
- Create machine images containing the Nessus vulnerability scanner☆13Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆77Dec 15, 2015Updated 10 years ago
- This tool creates an initial file repository directory tree structure for penetration test reporting/file storage based on single host, l…☆32Apr 4, 2017Updated 9 years ago
- Simple php backdoor based on extension☆22Feb 12, 2015Updated 11 years ago
- Password spraying script and helper for creating password lists☆34Sep 4, 2020Updated 5 years ago
- Converts the output from Invoke-Kerberoast into hashcat format.☆33Apr 1, 2026Updated 4 months ago
- WEB SERVICE SECURITY ASSESSMENT TOOL☆390Sep 24, 2021Updated 4 years ago
- IronWASP module to test security of SSL services. Ported from http://www.bolet.org/TestSSLServer/☆12Sep 2, 2013Updated 12 years ago