Alternatives and similar repositories for CrossXHR

Users that are interested in CrossXHR are comparing it to the libraries listed below

• CHYbeta / CVE-2017-11427-DEMO

  View on GitHub
  The Demo for CVE-2017-11427
  ☆12Mar 3, 2018Updated 7 years ago
• hacktics / vehicle

  View on GitHub
  Viewstate Hidden Control Enumerator
  ☆17Sep 12, 2013Updated 12 years ago
• 02husky / DecryptScripts

  View on GitHub
  ☆10May 23, 2019Updated 6 years ago
• tomekr / BurpFlashCSRFBuilder

  View on GitHub
  Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients
  ☆14Jul 3, 2013Updated 12 years ago
• Phoenix1112 / DnsR

  View on GitHub
  ☆12Sep 23, 2023Updated 2 years ago
• lcatro / cross_domain_postmessage_vuln_dig

  View on GitHub
  WEB 跨域postMessage() 漏洞挖掘工具,基本原理:使用AJAX 获取页面代码,结合iframe 和data 协议构造测试环境,然后在iframe 下的window.onmessage 中插入hook 监控onmessage 的参数,最后通过能否被原来的onme…
  ☆11Sep 13, 2016Updated 9 years ago
• asecurityteam / bug_crowd_client

  View on GitHub
  Python implementation of a Bugcrowd api client.
  ☆11Nov 20, 2025Updated 2 months ago
• ksparakis / apekit

  View on GitHub
  Mass Android app vulnerability analysis toolkit
  ☆13Dec 6, 2016Updated 9 years ago
• knownsec / 3102

  View on GitHub
  A domain/ip fuzzing tool for vulnerability mining
  ☆13Jan 2, 2015Updated 11 years ago
• CHYbeta / CVE-2018-11235-DEMO

  View on GitHub
  ☆14Jun 7, 2018Updated 7 years ago
• mrrobot1o1 / asnips

  View on GitHub
  ☆20May 24, 2021Updated 4 years ago
• iamultra / ssrfsocks

  View on GitHub
  Creates a SOCK proxy server that transmits data over an SSRF vulnerability
  ☆114Aug 8, 2012Updated 13 years ago
• SecarmaLabs / HttpPwnly

  View on GitHub
  "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protecti…
  ☆14Mar 4, 2017Updated 8 years ago
• gursev / flash-xdomain-xploit

  View on GitHub
  ActionScript Proof of Concept to perform cross-domain reads
  ☆43Aug 26, 2013Updated 12 years ago
• bit4woo / burp_collaborator_http_api

  View on GitHub
  Burp Suite Collaborator HTTP API
  ☆45May 27, 2018Updated 7 years ago
• zerothoughts / jndipoc

  View on GitHub
  Proof of concept showing how java byte code can be injected through InitialContext.lookup() calls
  ☆42Jan 22, 2016Updated 10 years ago
• Cn33liz / SmashedPotato

  View on GitHub
  ☆83Jan 29, 2016Updated 10 years ago
• mikispag / rosettaflash

  View on GitHub
  A tool for manipulating SWF files, leveraging zlib to craft alphanumeric-only valid SWF files in order to allow CSRF with SOP bypass than…
  ☆109Mar 26, 2024Updated last year
• wofeiwo / website-analyzer

  View on GitHub
  Analyze and display the Web technology of current page.
  ☆138Aug 14, 2017Updated 8 years ago
• jas502n / gitlab-SSRF-redis-RCE

  View on GitHub
  GitLab 11.4.7 SSRF配合redis远程执行代码
  ☆120Apr 24, 2019Updated 6 years ago
• M4sc3r4n0 / avoidz

  View on GitHub
  Avoidz tool to bypass most A.V softwares
  ☆139Sep 28, 2017Updated 8 years ago
• jespinhara / j-is-the-boss

  View on GitHub
  ☆23Apr 21, 2022Updated 3 years ago
• securityroots / passdb

  View on GitHub
  Ruby interface to cirt.net default passwords database
  ☆19May 4, 2011Updated 14 years ago
• zcgonvh / MS16-032

  View on GitHub
  MS16-032(CVE-2016-0099) for SERVICE ONLY
  ☆82Mar 15, 2017Updated 8 years ago
• verctor / CS_xor64

  View on GitHub
  cobaltstrike xor64.bin补完计划
  ☆135Oct 14, 2018Updated 7 years ago
• 7dog7 / flash-hijack

  View on GitHub
  flash 劫持轮子，CSRF，劫持，跳转，swf 有需求可以提issues ，src挖掘,劫持response
  ☆86Nov 9, 2019Updated 6 years ago
• attactics / cslogwatch

  View on GitHub
  Cobalt Strike log state tracking, parsing, and storage
  ☆24Jul 18, 2019Updated 6 years ago
• sevck / CVE-2017-12149

  View on GitHub
  CVE-2017-12149 JBOSS as 6.X反序列化(反弹shell版)
  ☆22Nov 22, 2017Updated 8 years ago
• hypn / custom-wordlists

  View on GitHub
  ☆24Nov 11, 2022Updated 3 years ago
• breenmachine / JavaUnserializeExploits

  View on GitHub
  ☆133Nov 6, 2015Updated 10 years ago
• GoSecure / break-fast-serial

  View on GitHub
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆55Mar 27, 2017Updated 8 years ago
• RickGray / cyberbot

  View on GitHub
  A lightweight batch scanning framework based on gevent.
  ☆48Jun 22, 2018Updated 7 years ago
• 3gstudent / p0wnedShell-DarkVersion

  View on GitHub
  Add my own POC to test Visual Studio trick to run code when building
  ☆22Jul 18, 2017Updated 8 years ago
• woanware / application-restriction-bypasses

  View on GitHub
  A set of compiled application restriction bypasses
  ☆30Mar 15, 2017Updated 8 years ago
• monoxgas / Trebuchet

  View on GitHub
  MS15-076 Privilege Escalation
  ☆101Sep 21, 2015Updated 10 years ago
• 3gstudent / Dump-Clear-Password-after-KB2871997-installed

  View on GitHub
  ☆62Jul 18, 2017Updated 8 years ago
• evilpacket / xss.io

  View on GitHub
  ☆73Apr 18, 2013Updated 12 years ago
• ring04h / rtcp2udp

  View on GitHub
  Reverse TCP Port to UDP Forwarding Tools
  ☆161Nov 11, 2016Updated 9 years ago
• RicterZ / simple-dns

  View on GitHub
  A simple regular-expression based DNS server
  ☆22Apr 21, 2015Updated 10 years ago