NodeJS Red-Team Cheat Sheet
☆231Jul 28, 2019Updated 7 years ago
Alternatives and similar repositories for NodeJS-Red-Team-Cheat-Sheet
Users that are interested in NodeJS-Red-Team-Cheat-Sheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A repo for holding cheat sheets for myself that cover various penetration testing tools and commands.☆40May 21, 2018Updated 8 years ago
- Prototype Pollution and useful Script Gadgets☆1,659Jan 27, 2024Updated 2 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆516Jul 29, 2020Updated 6 years ago
- Disposable and resilient red team infrastructure with Terraform☆285Feb 1, 2019Updated 7 years ago
- Content-Type Research☆673Jun 29, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- a patched sshd for red team activities☆86Aug 8, 2021Updated 5 years ago
- A tool to evaluate Content Security Policies.☆70Jun 20, 2020Updated 6 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆996Dec 31, 2021Updated 4 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,511Oct 12, 2024Updated 2 years ago
- secretz, minimizing the large attack surface of Travis CI☆325May 30, 2022Updated 4 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,643Aug 10, 2026Updated 2 months ago
- Notes about attacking Jenkins servers☆2,101Jul 10, 2024Updated 2 years ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆87Jun 24, 2022Updated 4 years ago
- 魔改了的iis后门，添加了流量加密，参数混淆等功能☆45Mar 4, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- PP-finder Help you find gadget for prototype pollution exploitation☆210May 15, 2026Updated 5 months ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,188May 26, 2023Updated 3 years ago
- List DTDs and generate XXE payloads using those local DTDs.☆664Feb 21, 2024Updated 2 years ago
- PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.☆3,913Sep 29, 2025Updated last year
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆332Mar 27, 2024Updated 2 years ago
- Python script to execute commands via Erlang/OTP Distribution Protocol☆15Feb 6, 2024Updated 2 years ago
- Evergrowing compilation of challenges I authored for various CTF's and my Intended solutions☆13Oct 7, 2022Updated 4 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- A DNS Bruteforcing Wordlist Generator☆366Feb 22, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Java RMI Vulnerability Scanner☆938Sep 3, 2026Updated last month
- A toolkit for testing, tweaking and cracking JSON Web Tokens☆6,808May 1, 2025Updated last year
- Shellcode launcher for AV bypass☆212Dec 23, 2023Updated 2 years ago
- Web CTF CheatSheet 🐈☆2,997Oct 28, 2025Updated last year
- Spring Boot Actuator (jolokia) XXE/RCE☆328Jun 16, 2020Updated 6 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆45Dec 22, 2021Updated 4 years ago
- Burp extension to increment a parameter in each active scan request☆13Aug 6, 2026Updated 2 months ago
- Modular C2 framework aiming to ease post exploitation for red teamers.☆192May 22, 2022Updated 4 years ago
- Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.☆1,084Apr 5, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- jolokia-exploitation-toolkit☆318Dec 19, 2024Updated last year
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,366Aug 7, 2026Updated 2 months ago
- ☆18Aug 15, 2021Updated 5 years ago
- A vulnerable application exposing Spring Boot Actuators☆123Feb 25, 2019Updated 7 years ago
- An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.☆54Mar 3, 2022Updated 4 years ago
- Content released at NorthSec 2018 for my talk on prototype pollution☆541May 25, 2024Updated 2 years ago
- This repo hosts a poc of how to execute F# code within an unmanaged process☆71Jun 25, 2024Updated 2 years ago