A server vulnerable to XXE that can be used to test payloads using the xxer tool.
☆26Mar 29, 2018Updated 8 years ago
Alternatives and similar repositories for vulnd_xxe
Users that are interested in vulnd_xxe are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆518Jul 29, 2020Updated 6 years ago
- Simple XXE test suite generated specifically for SAML interfaces☆23May 18, 2018Updated 8 years ago
- little scripts of bash stuff that i've found handy.☆16Feb 2, 2019Updated 7 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Dec 12, 2018Updated 7 years ago
- Vulnerable FastAPI in reference to Opensource Web Application Security Project (OWASP) TOP 10: 2021☆17Jan 3, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- SAP Message Server research presented at OPCDE 2019☆35Aug 18, 2020Updated 6 years ago
- A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity☆21Jul 3, 2024Updated 2 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 3 years ago
- ☆74Nov 5, 2018Updated 7 years ago
- A place to store my own wordlists, and link to others that are useful☆109Nov 15, 2023Updated 2 years ago
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- Repository for the wireshark plugin development project of the AMOS 16 course☆10Jan 6, 2017Updated 9 years ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- Fast and multi-purpose DNS toolkit allow to run multiple DNS queries.☆16Apr 18, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 2025最新，支持微信，钉钉，飞书实时cve监控，github-cve-monitor☆13Jul 24, 2025Updated last year
- This tool is a simple ffuf launcher which lets you select dynamically which wordlist and which extentions you want to fuzz.☆10Mar 16, 2026Updated 7 months ago
- An enumeration and exploitation toolkit using RFC calls to SAP☆41Jan 8, 2020Updated 6 years ago
- A mirror of several precompiled standalone red-teaming tools.☆19Feb 2, 2023Updated 3 years ago
- Runtime analysis of windows phone 7 applications.☆14Apr 21, 2017Updated 9 years ago
- 蓝牙安全检测项目☆13Jan 31, 2023Updated 3 years ago
- PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)☆82Jan 15, 2021Updated 5 years ago
- 🔍LeakScanner - Inspired by Gitleaks☆16Aug 23, 2024Updated 2 years ago
- View screenshots as a slideshow over http☆15Mar 13, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆26Oct 14, 2017Updated 9 years ago
- Master web security: OWASP Top 10, XSS, SQLi, CSRF, and secure coding practices. Includes labs, tools, and examples for secure web develo…☆11Jul 16, 2026Updated 3 months ago
- 若依4.8.0后台RCE☆27May 21, 2025Updated last year
- 域名接管漏洞,批量检测工具☆11Oct 29, 2020Updated 6 years ago
- Secrets detection based on regular expressions.☆23Sep 8, 2026Updated last month
- Collection of scripts that aid in penetration testing of JSON Web Tokens☆58Feb 2, 2019Updated 7 years ago
- Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340☆71Jun 10, 2020Updated 6 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 5 years ago
- parse ffuf & map endpoints to wordlists☆20Feb 25, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆10May 3, 2019Updated 7 years ago
- A QEMU based framework for instrumenting x86 programs from Python☆17Oct 5, 2020Updated 6 years ago
- regex Hunter- Fast website endpoint sensitive data and Leaks JS files endpoint API Key Scraper☆16Jun 8, 2024Updated 2 years ago
- sub domain wild card filtering tool☆39Apr 18, 2020Updated 6 years ago
- 二进制学习笔记☆12Oct 14, 2020Updated 6 years ago
- XSS reflector vulnerabilities exploitation extended.☆28Jul 25, 2021Updated 5 years ago
- PassLok for Email Chrome and Firefox extension☆11Nov 25, 2024Updated last year