bgeesaman / subpath-exploitLinks
Writeup of CVE-2017-1002101 with sample "exploit"/escape
☆35Updated 7 years ago
Alternatives and similar repositories for subpath-exploit
Users that are interested in subpath-exploit are comparing it to the libraries listed below
Sorting:
- PoC for CVE-2018-1002105.☆222Updated 7 years ago
- Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java☆55Updated 9 years ago
- 🔐 A concurrent, command-line AWS S3 Fuzzer. Written in Go.☆45Updated 8 years ago
- A front-end JavaScript toolkit for creating DNS rebinding attacks.☆45Updated 7 years ago
- Disposable Kali Linux containers for Mercury ISS / pentesting engagements.☆38Updated 6 years ago
- Test utility for cve-2018-1002105☆195Updated 7 years ago
- Python script to exploit CVE-2015-4852.☆31Updated 9 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆55Updated 8 years ago
- Extension adds a new tab in Burp Suite called Extractor☆42Updated 6 years ago
- ☆72Updated 8 years ago
- Some helpful Helm Charts for pentesters☆38Updated 7 years ago
- This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability☆54Updated 5 years ago
- Go static analysis tool that checks for security issues using an AST.☆29Updated 7 years ago
- A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications☆72Updated 11 years ago
- Full TTY reverse shell over SSH☆59Updated 5 years ago
- Burp Extension for AWS Signing☆90Updated last year
- ☆46Updated 9 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Updated 9 years ago
- Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro☆53Updated 12 years ago
- A quick and dirty .NET "Deserialize_*" fuzzer based on James Forshaw's (@tiraniddo) DotNetToJScript.☆42Updated 7 years ago
- An example of obtaining RCE via Redis and CSRF☆76Updated 9 years ago
- A tool to analyse JMX API security level.☆43Updated 11 years ago
- Proof-of-concept CORS exploitation tool.☆35Updated 6 years ago
- Proof of Concept exploit for Kubernetes CVE-2020-8559☆20Updated 5 years ago
- .NET Deserialization Passive Scanner☆46Updated 7 years ago
- DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source☆109Updated 6 years ago
- XSS payloads for edge cases☆34Updated 7 years ago
- A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.☆43Updated 5 years ago
- Python Web framework P0wner☆75Updated 13 years ago
- Another plugin for CRLF vulnerability detection☆25Updated 9 years ago