The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
☆446Aug 7, 2020Updated 6 years ago
Alternatives and similar repositories for MCIR
Users that are interested in MCIR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A configurable SQL injection test-bed☆122Jul 19, 2013Updated 13 years ago
- Vulnerable web site. Used to test sentinel features.☆11Nov 18, 2016Updated 9 years ago
- WackoPicko is a vulnerable web application used to test web application vulnerability scanners.☆354May 25, 2024Updated 2 years ago
- CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.☆195Jun 25, 2015Updated 11 years ago
- A JBoss script for obtaining remote shell access☆177Aug 7, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of web pages vulnerable to SQL injection flaws☆355Apr 14, 2022Updated 4 years ago
- A set of XSS vulnerable PHP scripts for testing☆38Feb 10, 2013Updated 13 years ago
- application server attack toolkit☆687Apr 6, 2020Updated 6 years ago
- SpiderLabs shared Nmap Tools☆233Aug 7, 2020Updated 6 years ago
- Some works on Nmap Scripts (NSE)☆90Jun 2, 2024Updated 2 years ago
- A modern vulnerable web app☆1,040Mar 11, 2021Updated 5 years ago
- A configurable OS shell command injection vulnerability testbed☆15Jul 19, 2013Updated 13 years ago
- Inject beef hooks into HTTP traffic and track hooked systems from cmdline☆126Apr 12, 2015Updated 11 years ago
- Simple REST-style web service for the CVE searching☆97May 19, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A repository of tools and scripts related to malware analysis☆256Jul 29, 2016Updated 10 years ago
- Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created d…☆68May 16, 2024Updated 2 years ago
- µphisher spear phishing tool (reference implementation)☆40Jun 26, 2020Updated 6 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆262May 16, 2025Updated last year
- A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.☆26Aug 10, 2013Updated 13 years ago
- a CMD shell in masm that listens on port 8080☆12Dec 19, 2020Updated 5 years ago
- Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…☆461Dec 6, 2021Updated 4 years ago
- A Java Server Faces (JSF) testing tool for decoding view state and creating view state attack vectors.☆34Dec 7, 2010Updated 15 years ago
- Local UNIX PrivEsc Aggregation☆242Apr 9, 2016Updated 10 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- XSS_Filter_Evasion_Cheat_Sheet 中文版☆123May 18, 2014Updated 12 years ago
- Damn Small Vulnerable Web☆882Aug 19, 2026Updated last month
- Add headers to all Burp requests to bypass some WAF products☆329Jan 28, 2018Updated 8 years ago
- A collection of web pages, vulnerable to command injection flaws.☆187Updated this week
- Patch Binaries via MITM: BackdoorFactory + mitmProxy.☆1,018Jul 31, 2021Updated 5 years ago
- A CTF VM that fights back☆19Apr 4, 2012Updated 14 years ago
- Lab set-up for learning SQL Injection Techniques☆100Dec 6, 2020Updated 5 years ago
- Recon, Subdomain Bruting, Zone Transfers☆226Aug 2, 2016Updated 10 years ago
- WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr …☆495Oct 3, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A reconnaissance tool that can quickly discover hostnames from a list of IP addresses.☆38Dec 6, 2010Updated 15 years ago
- "Broken NAT" - A suite of tools focused on detecting and interacting with publicly available BNAT scenerios☆25Aug 17, 2014Updated 12 years ago
- BrowserExploit is an advanced browser exploit pack for doing internal and external pentesting, helping gaining access to internal compute…☆331Apr 19, 2017Updated 9 years ago
- POC of code that downloads and executes shellcode in memory.☆80May 25, 2014Updated 12 years ago
- Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.☆1,326Sep 1, 2021Updated 5 years ago
- ☆17Oct 5, 2014Updated 12 years ago
- Performs method enumeration and interrogation against flash remoting end points.☆38Aug 7, 2020Updated 6 years ago