Alternatives and similar repositories for generate_xxe_payloads:

Users that are interested in generate_xxe_payloads are comparing it to the libraries listed below

• BlackFan / WEB-INF-dict
  List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
  ☆81Updated 6 years ago
• RandomRobbieBF / grafana-ssrf
  Authenticated SSRF in Grafana
  ☆79Updated 7 months ago
• Sy3Omda / burp-bounty
  Burp Bounty profiles
  ☆82Updated 3 years ago
• Lopseg / Jsdir
  Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.
  ☆118Updated 4 years ago
• p3n73st3r / Ghazi
  Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…
  ☆110Updated 5 years ago
• profmoriarity / rexsser
  This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.
  ☆76Updated 4 years ago
• Gilzy / 403Bypasser
  ☆55Updated 2 years ago
• SbIm / ExtractSubdomainFromFDNS
  ExtractSubdomainFromFDNS, updating
  ☆33Updated 5 years ago
• kapytein / jsonp
  jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.
  ☆149Updated 3 years ago
• PortSwigger / j2ee-scan
  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…
  ☆73Updated 3 years ago
• random-robbie / ssrf-finder
  Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.
  ☆106Updated 2 years ago
• ghsec / BBProfiles
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This …
  ☆60Updated 3 years ago
• lc / 230-OOB
  An Out-of-Band XXE server for retrieving file contents over FTP.
  ☆176Updated 4 years ago
• arbazkiraak / BurpBLH
  Broken Link Hijacking Burp Extension
  ☆56Updated 5 years ago
• arbazkiraak / LinksDumper
  Extract (links/possible endpoints) from responses & filter them via decoding/sorting
  ☆88Updated 5 years ago
• opnsec / postMessage-logger
  Simple "postMessage logger" Chrome extension
  ☆94Updated 4 years ago
• AsaiKen / dom-based-xss-finder
  Chrome extension that finds DOM based XSS vulnerabilities
  ☆71Updated 2 years ago
• err0rr / SSTI
  ☆38Updated 5 years ago
• jas502n / SpringBootVulExploit
  SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist
  ☆29Updated 4 years ago
• 0xbharath / assets-from-spf
  A Python script to parse net blocks & domain names from SPF record
  ☆82Updated 4 years ago
• vavkamil / XSSwagger
  A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks
  ☆57Updated 5 years ago
• theblackturtle / wildcheck
  A simple tool to detect wildcards domain based on Amass's wildcards detector.
  ☆62Updated 3 years ago
• spaceraccoon / spring-boot-actuator-h2-rce
  Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
  ☆103Updated 5 years ago
• JesseClarkND / abnormalizer
  unicode abnormalizer to takes a unicode string and abnormalizes it by character replacment
  ☆27Updated 4 years ago
• vavkamil / wp-update-confusion
  WordPress Plugin Update Confusion
  ☆67Updated 3 years ago
• ThoundsN / AllinOne
  ☆10Updated 6 months ago
• 0xAwali / Virtual-Host
  Modified Nuclei Templates Version to FUZZ Host Header
  ☆49Updated 3 years ago
• pelaohxc / postMessageFinder
  ☆36Updated 4 years ago
• JR0ch17 / rdse
  Extracts subdomains from a specified domain using https://recon.dev.
  ☆16Updated 4 years ago
• Healdb / Gather
  URL Screenshot Utility
  ☆27Updated last year