The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.
☆446Aug 7, 2020Updated 6 years ago
Alternatives and similar repositories for MCIR
Users that are interested in MCIR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A configurable SQL injection test-bed☆122Jul 19, 2013Updated 13 years ago
- Inject beef hooks into HTTP traffic and track hooked systems from cmdline☆127Apr 12, 2015Updated 11 years ago
- Vulnerable web site. Used to test sentinel features.☆11Nov 18, 2016Updated 9 years ago
- WackoPicko is a vulnerable web application used to test web application vulnerability scanners.☆353May 25, 2024Updated 2 years ago
- CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.☆195Jun 25, 2015Updated 11 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- SpiderLabs shared Nmap Tools☆234Aug 7, 2020Updated 6 years ago
- application server attack toolkit☆689Apr 6, 2020Updated 6 years ago
- A collection of web pages vulnerable to SQL injection flaws☆356Apr 14, 2022Updated 4 years ago
- A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.☆26Aug 10, 2013Updated 13 years ago
- A configurable XPath/XML injection testbed☆33Jul 19, 2013Updated 13 years ago
- This is a SOAP service written in C# that has intentional SQL injection vulnerabilties.☆21Nov 27, 2016Updated 9 years ago
- µphisher spear phishing tool (reference implementation)☆40Jun 26, 2020Updated 6 years ago
- A modern vulnerable web app☆1,039Mar 11, 2021Updated 5 years ago
- A configurable OS shell command injection vulnerability testbed☆15Jul 19, 2013Updated 13 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A JBoss script for obtaining remote shell access☆177Aug 7, 2020Updated 6 years ago
- WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr …☆497Oct 3, 2024Updated 2 years ago
- Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created d…☆68May 16, 2024Updated 2 years ago
- Advanced HTTP fingerprinting PoC☆45Mar 27, 2017Updated 9 years ago
- A program to monitor network traffic and detect unauthorized sessions.☆43Dec 6, 2010Updated 15 years ago
- A reconnaissance tool that can quickly discover hostnames from a list of IP addresses.☆38Dec 6, 2010Updated 15 years ago
- A repository of tools and scripts related to malware analysis☆256Jul 29, 2016Updated 10 years ago
- Damn Small Vulnerable Web☆884Aug 19, 2026Updated 2 months ago
- Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…☆461Dec 6, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Some works on Nmap Scripts (NSE)☆89Jun 2, 2024Updated 2 years ago
- OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.☆364Jul 24, 2026Updated 3 months ago
- a CMD shell in masm that listens on port 8080☆12Dec 19, 2020Updated 5 years ago
- A set of XSS vulnerable PHP scripts for testing☆38Feb 10, 2013Updated 13 years ago
- Recon, Subdomain Bruting, Zone Transfers☆227Aug 2, 2016Updated 10 years ago
- Performs method enumeration and interrogation against flash remoting end points.☆38Aug 7, 2020Updated 6 years ago
- Short and simple vulnerable PHP web application that naïve scanners found to be perfectly safe☆14Dec 4, 2015Updated 10 years ago
- A Python Framework For NoSQL Scanning and Exploitation☆604Dec 6, 2024Updated last year
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.☆30May 10, 2016Updated 10 years ago
- WAFNinja is a tool which contains two functions to attack Web Application Firewalls.☆833Aug 11, 2026Updated 2 months ago
- Add headers to all Burp requests to bypass some WAF products☆329Jan 28, 2018Updated 8 years ago
- Patch Binaries via MITM: BackdoorFactory + mitmProxy.☆1,019Jul 31, 2021Updated 5 years ago
- Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and conf…☆325Updated this week
- Burp plugin to do random fuzzing of HTTP requests☆33Jan 31, 2017Updated 9 years ago
- Flash crossdomain policy security checker☆26Oct 3, 2015Updated 11 years ago