Prototype Pollution - A detailed study + hands on lab.
☆16Oct 11, 2022Updated 3 years ago
Alternatives and similar repositories for prototype-pollution
Users that are interested in prototype-pollution are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Prototype-Pollution-Lab to chain the vulnerabilities between multiple accounts.☆13Sep 11, 2021Updated 4 years ago
- Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, f…☆14Sep 20, 2021Updated 4 years ago
- 2022 CTF public release☆23Jun 15, 2022Updated 4 years ago
- My CTF Challenge☆12Feb 5, 2026Updated 6 months ago
- Hard fork of mcguinness/saml-idp; a local SAML Identity Provider (IdP) library to test SAML 2.0 Service Providers (SPs).☆11Oct 8, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell☆14May 25, 2025Updated last year
- Writeups for the challenges i wrote for ASCWG quals☆11Aug 8, 2022Updated 4 years ago
- CVE, reports, research☆15Mar 17, 2021Updated 5 years ago
- ☆13Jun 12, 2023Updated 3 years ago
- Preparation of Attack & Defense CTF for iHack 2022☆16Nov 28, 2023Updated 2 years ago
- Attack-defense CTF training organized by dtl on 23 Jul, 2023☆12Jul 24, 2023Updated 3 years ago
- Web application recon for bug bounty☆21Apr 19, 2020Updated 6 years ago
- A Jekyll theme for hosting documentation on GitHub Pages.☆19Jul 8, 2023Updated 3 years ago
- Character Entities for HTML, CSS (content) and Javascript.☆15Aug 1, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A really good cybersec reading materials.☆13Aug 13, 2022Updated 4 years ago
- Tests for LFI in PHP apps and automates the process of leveraging LFI's to recursively download source code and discover new files via in…☆14Sep 29, 2022Updated 3 years ago
- Nuclei plugin for BurpSuite☆17Nov 29, 2024Updated last year
- WolvCtf-2023-Challenges-Public☆12Apr 13, 2023Updated 3 years ago
- Pwnkit Exploit (CVE-2021-4034), no download capabilty? Copy and paste it!☆17Jan 28, 2022Updated 4 years ago
- Burp Suite extension that enhances Burp Active Scan by adding template engine specific SSTI payloads.☆28Feb 20, 2024Updated 2 years ago
- Tools used for Pentesting☆22Apr 21, 2023Updated 3 years ago
- Grab unsaved Notepad contents with a Beacon Object File☆11Jun 19, 2022Updated 4 years ago
- script python to check url list via cookies and Authorization☆19Feb 28, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains.…☆21Dec 29, 2023Updated 2 years ago
- ☆18May 21, 2019Updated 7 years ago
- only 5 characters to rce☆15Aug 17, 2022Updated 4 years ago
- How to do recon on a web-application properly☆16Jul 12, 2022Updated 4 years ago
- Admin Template built with Bootstrap 4.5.3☆23Jan 6, 2023Updated 3 years ago
- Cool HackerOne Reports☆23Nov 16, 2022Updated 3 years ago
- ☆12Aug 1, 2022Updated 4 years ago
- ☆12Oct 30, 2025Updated 9 months ago
- PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configur…☆22Feb 24, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆23Apr 30, 2023Updated 3 years ago
- Prototype Pollution and useful Script Gadgets☆1,641Jan 27, 2024Updated 2 years ago
- Write-ups cho một số bài trên Reversing.kr☆13Mar 24, 2023Updated 3 years ago
- A list of all awesome CVELabs☆27Apr 5, 2026Updated 4 months ago
- rShellZ s a linux reverse-shell & exploitation assistance framework. With lots of payload and post exploitation modules.☆13Dec 13, 2023Updated 2 years ago
- Autonomous pentesting agent — Claude Code Hackathon (Feb 10-16, 2026). The LLM builds the automation that replaces itself.☆20Feb 16, 2026Updated 6 months ago
- Some oneliners with descriptions and Regex that I frequently use while doing bug hunting. More to come 🚀🚀☆25Dec 24, 2022Updated 3 years ago