This tool is just after the first refactoring pushed. Original is from Will Vandevanter (BuffaloWill). Only rearrange the code which will eventually make it easier to maintain and add new payloads.
☆34Jun 10, 2016Updated 10 years ago
Alternatives and similar repositories for generate_xxe_payloads
Users that are interested in generate_xxe_payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A python Flask app that generates dynamic DTDs for easy out-of-band data exfiltration.☆30Nov 2, 2022Updated 3 years ago
- Amassing wealth in the form of biochemical tactical nuclear hack precision strike notes for existential fulfillment and destruction of th…☆14Feb 19, 2022Updated 4 years ago
- ☆12Feb 18, 2022Updated 4 years ago
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Nov 18, 2019Updated 6 years ago
- ☆13Jul 25, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- X-Forwarded-For [403 forbidden] enumeration☆101May 3, 2024Updated 2 years ago
- ☆14Nov 29, 2019Updated 6 years ago
- ☆13Sep 8, 2024Updated 2 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 5 years ago
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆13Dec 29, 2020Updated 5 years ago
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated 2 years ago
- A support web page for my eJPT / eCPPT Certification Process☆16Jan 18, 2018Updated 8 years ago
- A tool for embedding XXE/XML exploits into different filetypes☆1,181Dec 16, 2024Updated last year
- ☆96Oct 1, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Get all possible href | src | url from target url or domain☆40Aug 5, 2020Updated 6 years ago
- Query various sources for CVE proof-of-concepts☆50Jun 1, 2023Updated 3 years ago
- A tool to download program information from Bugcrowd, for use by researchers to compare programs they are eligible to participate in☆20Dec 22, 2022Updated 3 years ago
- ☆20Aug 19, 2019Updated 7 years ago
- Web Application Attack☆14Dec 16, 2019Updated 6 years ago
- An intentionally designed broken web application based on REST API☆13May 25, 2022Updated 4 years ago
- Cross-Site Scripting (XSS) vulnerability analyzer☆21Feb 13, 2026Updated 8 months ago
- A bridge between masscan and nmap - run fast masscan, parse output, execute nmap using masscan as input☆32Nov 16, 2025Updated 11 months ago
- Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common m…☆76Mar 22, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- IIS shortname scanner written in Go☆360Mar 25, 2023Updated 3 years ago
- A tool for fetching archived URLs (to be rewritten in Go).☆42Jul 19, 2018Updated 8 years ago
- ☆32Dec 30, 2022Updated 3 years ago
- Proof-of-concept CORS exploitation tool.☆35Sep 7, 2019Updated 7 years ago
- A simple Burp extension for scanning stuffs in CTF☆30Jan 22, 2018Updated 8 years ago
- A Go implementation of dirsearch.☆41Mar 10, 2019Updated 7 years ago
- PoC for CVE-2021-43557☆23Nov 22, 2021Updated 4 years ago
- Collection of ctf write-up source codes.☆16Jun 28, 2021Updated 5 years ago
- Test the speed and reliability of a list of DNS servers☆22Sep 7, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Bug Bounty Recon wordlist Generator☆21Jul 17, 2020Updated 6 years ago
- Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.☆119Sep 12, 2020Updated 6 years ago
- POC for Spring Kafka Deserialization Vulnerability CVE-2023-34040☆46May 4, 2026Updated 5 months ago
- Kubernetes Scanner☆40Feb 14, 2022Updated 4 years ago
- Tool to find the real IP behind CDNs/WAFs like cloudflare using passive recon by retrieving the favicon hash. For the same hash value, al…☆183Jan 6, 2021Updated 5 years ago
- ☆18Jun 19, 2016Updated 10 years ago
- Summary of almost all paid bounty reports on H1☆48Sep 8, 2020Updated 6 years ago