centime / jsfsck
Forked from jsfuck: jsf$ck - Write any JavaScript without parenthesis, using +![]{}$`
☆21Updated 8 years ago
Related projects ⓘ
Alternatives and complementary repositories for jsfsck
- Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP …☆73Updated 3 years ago
- TLS CBC Padding Oracle Checker☆52Updated 2 years ago
- Simple trick to increase readability of exceptions raised by Burp extensions written in Python☆43Updated 7 years ago
- A regular expression fuzzer.☆43Updated 6 years ago
- Exploit insecure crossdomain.xml files.☆26Updated 7 years ago
- My python3 implementation of a Forward Shell☆35Updated 5 years ago
- Python Package for burprestapi☆16Updated 4 years ago
- DNS server limitation mapper☆25Updated 6 years ago
- A framework for exploiting padding oracles in network-based applications☆25Updated last year
- Capture all RabbitMQ messages being sent through a broker.☆30Updated 3 years ago
- HTTP Desync Attack☆28Updated 4 years ago
- Cracker for Apache.lang.commons RandomStringUtils(). Code for "The Java Soothsayer" talk at EkoParty 2017 by Alejo Popovici.☆32Updated 6 years ago
- A simple remote scanner for Liferay Portal☆18Updated last year
- XSS in pastebin.com and reddit.com via unsanitized markdown output☆87Updated 6 years ago
- A collection of my Semgrep rules☆47Updated last year
- Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (S…☆34Updated 6 years ago
- A rust utility for instrumenting binaries, used in Holiday Hack Challenge 2021☆26Updated 2 years ago
- PoC for leaking text nodes via CSS injection☆35Updated 6 years ago
- a shared short domain for XSS and other hacks☆31Updated 2 years ago
- Collection of my slide decks & conference videos☆27Updated 4 years ago
- ☆44Updated 2 years ago
- A variation of the IKE-SCAN user guide's transforms discovery script, adding a few features. Handshakes can be done in Main or Aggressive…☆13Updated 4 months ago
- List of Trusted Types bypasses☆86Updated 7 months ago
- .NET Deserialization Passive Scanner☆45Updated 6 years ago
- public exploits☆35Updated last year
- During pentesting I often miss screenshots of events for reports due to the quick pace of testing and a lack of foreknowledge about what …☆25Updated 5 years ago
- Full TTY reverse shell over SSH☆57Updated 4 years ago
- A front-end JavaScript toolkit for creating DNS rebinding attacks.☆45Updated 6 years ago
- SQL injection via bruteforced MD5 hash reflection of random strings☆50Updated 5 years ago