devploit/XORpass external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

devploit/XORpass

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/devploit/XORpass)

Close

devploit / XORpassView on GitHubMore

• External links
• Readme badge

Encoder to bypass WAF filters using XOR operations.

☆253Jul 7, 2022Updated 3 years ago

Alternatives and similar repositories for XORpass

Users that are interested in XORpass are comparing it to the libraries listed below

• devploit / unaalmes-writeups

  View on GitHub
  Repository to save all write-ups from UAM challenges
  ☆29Sep 23, 2020Updated 5 years ago
• r00t4dm / aLIEz

  View on GitHub
  ☆197Sep 26, 2024Updated last year
• hekadan / CVE-2019-7609

  View on GitHub
  ☆21Dec 1, 2019Updated 6 years ago
• jas502n / FinalShellDecodePass

  View on GitHub
  FinalShellDecodePass 加密解密
  ☆83Dec 1, 2021Updated 4 years ago
• augustd / burp-suite-swaggy

  View on GitHub
  Burp Suite extension for parsing Swagger web service definition files
  ☆19Jul 15, 2025Updated 8 months ago
• SummerSec / AgentInjectTool

  View on GitHub
  改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
  ☆279Nov 28, 2023Updated 2 years ago
• jimsonzhang / Ortau

  View on GitHub
  一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。
  ☆81Feb 14, 2022Updated 4 years ago
• 1n7erface / Template

  View on GitHub
  Next generation RedTeam heuristic intranet scanning | 下一代RedTeam启发式内网扫描
  ☆1,115Sep 16, 2023Updated 2 years ago
• devploit / put2win

  View on GitHub
  Script to automate PUT HTTP method exploitation to get shell
  ☆125Jun 25, 2020Updated 5 years ago
• hosch3n / msmap

  View on GitHub
  Msmap is a Memory WebShell Generator.
  ☆584Apr 22, 2023Updated 2 years ago
• yanghaoi / CobaltStrike_CNA

  View on GitHub
  使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。
  ☆554Jan 18, 2022Updated 4 years ago
• FunnyWolf / pystinger

  View on GitHub
  Bypass firewall for traffic forwarding using webshell
  ☆1,430Sep 29, 2021Updated 4 years ago
• uknowsec / loginlog_windows

  View on GitHub
  读取登录过本机的登录失败或登录成功的所有计算机信息，在内网渗透中快速定位运维管理人员。
  ☆221Sep 30, 2019Updated 6 years ago
• w9w / Open_Redirects_list

  View on GitHub
  -
  ☆11Nov 21, 2020Updated 5 years ago
• Rvn0xsy / zipcreater

  View on GitHub
  ZipCreater主要应用于跨目录的文件上传漏洞的利用，它能够快速进行压缩包生成。
  ☆187Apr 6, 2022Updated 3 years ago
• wikiZ / RedGuard

  View on GitHub
  RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.
  ☆1,562Aug 20, 2024Updated last year
• woodpecker-framework / woodpecker-framework-release

  View on GitHub
  高危漏洞精准检测与深度利用框架
  ☆1,457Jan 8, 2023Updated 3 years ago
• LandGrey / ClassHound

  View on GitHub
  利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码
  ☆712May 10, 2021Updated 4 years ago
• Mr-xn / CVE-2022-24112

  View on GitHub
  CVE-2022-24112：Apache APISIX apisix/batch-requests RCE
  ☆44Feb 22, 2022Updated 4 years ago
• rootclay / WMIHACKER

  View on GitHub
  A Bypass Anti-virus Software Lateral Movement Command Execution Tool
  ☆1,464Jan 20, 2025Updated last year
• Andromeda1957 / LinPwn

  View on GitHub
  Interactive Post Exploitation Tool
  ☆37Oct 1, 2019Updated 6 years ago
• shmilylty / cve-2021-22005-exp

  View on GitHub
  ☆195Dec 22, 2021Updated 4 years ago
• UzJu / Cloud-Bucket-Leak-Detection-Tools

  View on GitHub
  六大云存储，泄露利用检测工具
  ☆1,245Mar 28, 2025Updated 11 months ago
• Like0x / 0xagent

  View on GitHub
  CobaltStrike 4.0 - 4.5 Patch
  ☆178Oct 21, 2022Updated 3 years ago
• k-fire / shellcode-to-dll

  View on GitHub
  shellcode 异或加密并生成dll
  ☆250Jul 6, 2020Updated 5 years ago
• SpiderMate / B-XSSRF

  View on GitHub
  Toolkit to detect and keep track on Blind XSS, XXE & SSRF
  ☆293Aug 23, 2019Updated 6 years ago
• u21h2 / nacs

  View on GitHub
  事件驱动的渗透测试扫描器 Event-driven pentest scanner
  ☆698Jul 7, 2024Updated last year
• jas502n / CVE-2019-2890

  View on GitHub
  CVE-2019-2890 WebLogic 反序列化RCE漏洞
  ☆44Dec 8, 2019Updated 6 years ago
• RicterZ / PySharpSphere

  View on GitHub
  Yet another SharpSphere
  ☆227Aug 1, 2021Updated 4 years ago
• smiegles / subdomainDB

  View on GitHub
  SubdomainDB is a simple self-hosted API that allows you to maintain your own subdomain database.
  ☆31Jan 8, 2018Updated 8 years ago
• arbazkiraak / LinksDumper

  View on GitHub
  Extract (links/possible endpoints) from responses & filter them via decoding/sorting
  ☆93Aug 27, 2019Updated 6 years ago
• L-codes / pwcrack-framework

  View on GitHub
  Password Crack Framework
  ☆516Feb 25, 2024Updated 2 years ago
• BeichenDream / Chunk-Proxy

  View on GitHub
  ☆295May 7, 2022Updated 3 years ago
• depycode / fastjson-c3p0

  View on GitHub
  fastjson不出网利用、c3p0
  ☆256Jul 30, 2021Updated 4 years ago
• SkewwG / domainTools

  View on GitHub
  内网域渗透小工具
  ☆733Apr 20, 2021Updated 4 years ago
• Taonn / EmailAll

  View on GitHub
  EmailAll is a powerful Email Collect tool — 一款强大的邮箱收集工具
  ☆736Mar 4, 2022Updated 4 years ago
• uknowsec / SharpSQLTools

  View on GitHub
  SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
  ☆964Aug 5, 2021Updated 4 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,405Jan 18, 2022Updated 4 years ago
• shmilylty / vhost_password_decrypt

  View on GitHub
  vhost password decrypt
  ☆262Oct 9, 2024Updated last year