Xss payload for bypassing waf
☆20Apr 18, 2020Updated 6 years ago
Alternatives and similar repositories for noobstuffs
Users that are interested in noobstuffs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- XSS payloads for bypassing WAF. This repository is updating continuously.☆277Mar 15, 2024Updated 2 years ago
- Nuclei Templates☆25Oct 17, 2024Updated 2 years ago
- Process URLs and remove duplicate query parameters.☆27Mar 19, 2024Updated 2 years ago
- XXE漏洞检测 Payload大全☆13Apr 28, 2019Updated 7 years ago
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Cool HackerOne Reports☆22Nov 16, 2022Updated 3 years ago
- A list of notes that I've compiled over time to help with CTF's and the OSCP exam.☆10Dec 29, 2020Updated 5 years ago
- A domain recon tool to help detect DNS based vulnerabilities, such as zone transfers and subdomain takeovers.☆12Mar 25, 2022Updated 4 years ago
- A lightweight Python tool to analyze PCAP files and generate network traffic reports. It detects traffic patterns, security concerns, and…☆19Sep 25, 2024Updated 2 years ago
- LogSnare: A playground for testing, preventing, and logging IDOR vulnerabilities.☆35Mar 4, 2024Updated 2 years ago
- Cross-Site Scripting (XSS) is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP To…☆12Jan 30, 2023Updated 3 years ago
- World's most Powerful and Advanced Cross Site Scripting Software☆28Jan 5, 2020Updated 6 years ago
- ☆28Dec 13, 2023Updated 2 years ago
- Scripts/tools to destroy things☆15Oct 7, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Get 10k subdomains in securitytrails using cookie without apikey.☆43Oct 23, 2025Updated last year
- 判断是不是CDN IP，用于收缩目标资产范围☆10Mar 9, 2022Updated 4 years ago
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- Webarchive is a Go package for pentesters and developers to interacting with the Wayback Machine's CDX API and integrate web archive util…☆11Feb 25, 2024Updated 2 years ago
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing☆142Jun 27, 2023Updated 3 years ago
- Shared wordlists used for common subdomains , directory bruteforcing etc.☆12Jun 23, 2026Updated 4 months ago
- Vulnerable Task Manager☆22Updated this week
- ☆13Sep 8, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- BurpSiute - BurpBounty Profiles☆20Feb 10, 2023Updated 3 years ago
- CVE-2023-7028☆58Jan 12, 2024Updated 2 years ago
- post exploitation: dll injection, process hollowing, RunPe, Keyloggers, UacByPass, PayloadEncryption etc..☆14Aug 31, 2017Updated 9 years ago
- Welcome to RFS notes to CRTP - Certified Red Team Professional by Altered Security.☆30Aug 20, 2024Updated 2 years ago
- ☆12Mar 12, 2022Updated 4 years ago
- Simple Automation script for juniper cve-2023-36845☆19Jan 30, 2024Updated 2 years ago
- A solid recon tool I use personally.☆30May 12, 2023Updated 3 years ago
- Chameleon Wordlists☆15Sep 13, 2022Updated 4 years ago
- Linux Malware creator to attack Windows System via Reverse Shell with FindWindow Process Code Injection☆20Mar 18, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 申明：仅供教学演示，禁用非法、未授权等进行钓鱼，后果自负。☆13May 21, 2024Updated 2 years ago
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆14Aug 15, 2024Updated 2 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆17Jan 31, 2021Updated 5 years ago
- the POC of package.json RCE☆27Jun 24, 2025Updated last year
- TPLINK TL-WR840N Proof Of Concept. This issue affect firmware file. So we can get the backup configuration file and gain access to Admin …☆10Jul 30, 2021Updated 5 years ago
- All key information of each module and more of Hackthebox Academy CPTS job role path. Solutions and walkthroughs for each question and ea…☆28Aug 17, 2024Updated 2 years ago
- Borscht - A Russian service monitor to track the uptime of domains and services☆10May 9, 2022Updated 4 years ago