brandonprry / vulnerable_xxeLinks
A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.
☆26Updated 12 years ago
Alternatives and similar repositories for vulnerable_xxe
Users that are interested in vulnerable_xxe are comparing it to the libraries listed below
Sorting:
- PHDAYS |||☆17Updated 12 years ago
- Spray SMB with hashes, Then psexec☆32Updated 6 years ago
- WhiteBox CMS analysis☆68Updated 2 years ago
- Python Implementation of a .NET Padding Oracle Assessment Tool☆30Updated 9 years ago
- Issues to consider when planning a red team exercise.☆15Updated 8 years ago
- Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.☆44Updated 5 years ago
- Modified version of ActiveScan++ Burp Suite extension☆31Updated 8 years ago
- Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)☆38Updated 9 years ago
- A Pythonic wrapper to MassDNS☆24Updated 7 years ago
- My IDA scripts, tips and testing techniques for Thick Client applications.☆17Updated 11 years ago
- The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and ai…☆13Updated 6 years ago
- ☆19Updated 8 years ago
- Materials related to the 2017 BSides Las Vegas presentation☆52Updated 4 years ago
- XXE attack tool☆31Updated 9 years ago
- A BurpSuite extension for lair☆28Updated 8 years ago
- Windows LNK/URL shortcut auto-binding hotkey (not a bug, feature)☆30Updated 7 years ago
- An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match☆42Updated 13 years ago
- Ruby based script to perform application scanning of a URL, looking for specific pages to target.☆26Updated 11 years ago
- Burp extension to decode NTLM SSP headers and extract domain/host information☆32Updated 4 years ago
- Axis2 RPC Shell☆15Updated 10 years ago
- Nashorn Post Exploitation☆32Updated 7 years ago
- WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin☆64Updated 2 years ago
- Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability☆10Updated 7 years ago
- Collection of tools for privesc on Linux☆34Updated 12 years ago
- CVE-2017-8570 Exploit☆21Updated 8 years ago
- AWS S3 Bucket/Object Finder☆25Updated 8 years ago
- A Burp Extender plugin, that will make binary soap objects readable and modifiable.☆30Updated 3 years ago
- Reverse to use in a batfile which can call the ip and ports from itself☆25Updated 4 years ago
- Check privileges, settings and other information on Linux systems and suggest exploits based on kernel versions☆25Updated 8 years ago
- This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. …☆42Updated 8 years ago