appsecco/json-flash-csrf-poc external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

appsecco/json-flash-csrf-poc

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/appsecco/json-flash-csrf-poc)

Close

appsecco / json-flash-csrf-pocView on GitHubMore

• External links
• Readme badge

This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.

☆78Feb 5, 2018Updated 8 years ago

Alternatives and similar repositories for json-flash-csrf-poc

Users that are interested in json-flash-csrf-poc are comparing it to the libraries listed below

• mhaskar / CVE-2019-20224

  View on GitHub
  The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224
  ☆14Jan 10, 2020Updated 6 years ago
• tarantula-team / CVE-2019-12949

  View on GitHub
  CVE-2019-12949
  ☆26Jun 28, 2019Updated 6 years ago
• WyAtu / CVE-2018-4407

  View on GitHub
  CVE-2018-4407 IOS/macOS kernel crash
  ☆13Feb 23, 2019Updated 7 years ago
• verctor / nexus_rce_CVE-2019-7238

  View on GitHub
  Some debug notes and exploit(not blind)
  ☆39Jul 28, 2019Updated 6 years ago
• jeffzh3ng / fuxi-ui

  View on GitHub
  Penetration Testing Platform (Front-End Code)
  ☆17Jan 5, 2023Updated 3 years ago
• cainiaocome / xssgun

  View on GitHub
  xss payloads generator
  ☆25Mar 1, 2019Updated 7 years ago
• zerothoughts / jndipoc

  View on GitHub
  Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
  ☆42Jan 22, 2016Updated 10 years ago
• sethsec / Nodejs-SSRF-App

  View on GitHub
  Nodejs application intentionally vulnerable to SSRF
  ☆42May 12, 2023Updated 2 years ago
• jas502n / CVE-2019-0193

  View on GitHub
  Apache Solr DataImport Handler RCE
  ☆91Aug 12, 2019Updated 6 years ago
• JackDoan / TP-Link-ArcherC5-RCE

  View on GitHub
  CVE-2018-19537
  ☆20Nov 26, 2018Updated 7 years ago
• vysecurity / VBA-RunPE

  View on GitHub
  A VBA implementation of the RunPE technique or how to bypass application whitelisting.
  ☆14Dec 30, 2018Updated 7 years ago
• inspiringz / Shiro-721

  View on GitHub
  Shiro-721 RCE Via RememberMe Padding Oracle Attack
  ☆269Oct 29, 2020Updated 5 years ago
• jas502n / CVE-2018-10933

  View on GitHub
  libssh CVE-2018-10933
  ☆21Oct 20, 2018Updated 7 years ago
• security-dockerfiles / beef

  View on GitHub
  Dockerized BeEF
  ☆44Dec 7, 2021Updated 4 years ago
• veracode-research / actuator-testbed

  View on GitHub
  A vulnerable application exposing Spring Boot Actuators
  ☆123Feb 25, 2019Updated 7 years ago
• HackingEnVivo / IpScanner

  View on GitHub
  Script hecho en python, para sacar la IP, de las paginas web.
  ☆11Aug 25, 2022Updated 3 years ago
• Artemis1029 / Java_xmlhack

  View on GitHub
  帮助java环境下任意文件下载情况自动化读取源码的小工具
  ☆167Apr 5, 2019Updated 6 years ago
• Cryin / Paper

  View on GitHub
  Web Security Technology & Vulnerability Analysis Whitepapers
  ☆549Jan 1, 2019Updated 7 years ago
• shengqi158 / Jackson-databind-RCE-PoC

  View on GitHub
  ☆83Jan 11, 2018Updated 8 years ago
• LeadroyaL / java_xxe_2019

  View on GitHub
  总结了一下2019年在JVM环境中使用XXE攻击的知识
  ☆58Oct 31, 2019Updated 6 years ago
• Saferman / CVE-2020-7471

  View on GitHub
  django 漏洞：CVE-2020-7471 Potential SQL injection via StringAgg(delimiter) 的漏洞环境和 POC
  ☆103Feb 13, 2020Updated 6 years ago
• al0ne / MacCheck

  View on GitHub
  一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项
  ☆78Jul 21, 2020Updated 5 years ago
• Hpd0ger / InFoCollecter

  View on GitHub
  针对域名/页面的接口爬取，递归模式入库
  ☆22Sep 18, 2019Updated 6 years ago
• l3m0n / whatweb

  View on GitHub
  更快速的进行Web应用指纹识别
  ☆170May 9, 2019Updated 6 years ago
• iSafeBlue / fastjson-autotype-bypass-demo

  View on GitHub
  fastjson 1.2.68 版本 autotype bypass
  ☆142Jun 17, 2022Updated 3 years ago
• nccgroup / freddy

  View on GitHub
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆584Sep 7, 2021Updated 4 years ago
• QAX-A-Team / HideShell

  View on GitHub
  A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.
  ☆216Mar 31, 2019Updated 6 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆436May 8, 2023Updated 2 years ago
• fnmsd / zimbra_poc

  View on GitHub
  Zimbra XXE+SSRF+UPLOAD Poc
  ☆59Jun 25, 2019Updated 6 years ago
• zerothoughts / spring-jndi

  View on GitHub
  Proof of concept exploit, showing how to do bytecode injection through untrusted deserialization with Spring Framework 4.2.4
  ☆116May 17, 2019Updated 6 years ago
• ttttmr / php-fpm

  View on GitHub
  用WebShell攻击PHP-FPM Attacking PHP-FPM with WebShell
  ☆41May 6, 2021Updated 4 years ago
• evict / poc_CVE-2018-1002105

  View on GitHub
  PoC for CVE-2018-1002105.
  ☆222Dec 21, 2018Updated 7 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆210Mar 10, 2019Updated 6 years ago
• TuuuNya / nmap_scripts

  View on GitHub
  nmap默认的scripts和自己收集的一些scripts
  ☆21Feb 22, 2018Updated 8 years ago
• scateu / U2Fishing

  View on GitHub
  ☆12May 22, 2018Updated 7 years ago
• PortSwigger / sharpener

  View on GitHub
  ☆13Feb 22, 2024Updated 2 years ago
• 0xFA-Team / CVE-2019-0604

  View on GitHub
  cve-2019-0604 SharePoint RCE exploit
  ☆40Jun 26, 2019Updated 6 years ago
• No-Github / Adinfo

  View on GitHub
  域信息收集工具
  ☆11Jun 5, 2023Updated 2 years ago
• x64x6a / ctf-writeups

  View on GitHub
  Various CTF challenge solutions
  ☆12Apr 20, 2021Updated 4 years ago