dreadlocked / Drupalgeddon2
Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
☆579Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for Drupalgeddon2
- Drupal enumeration & exploitation tool☆584Updated 4 years ago
- 💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002☆349Updated 5 years ago
- kadimus is a tool to check and exploit lfi vulnerability.☆514Updated 4 years ago
- A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.☆1,288Updated 10 months ago
- From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras☆423Updated 4 years ago
- ReverShellGenerator - A tool to generate various ways to do a reverse shell☆555Updated 6 months ago
- BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source c…☆532Updated 2 years ago
- This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…☆346Updated 6 years ago
- A unique automated LFi Exploiter with Bind/Reverse Shells☆267Updated 9 years ago
- Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and us…☆568Updated 5 months ago
- A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.☆958Updated 6 years ago
- fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion b…☆521Updated 2 years ago
- Lesser Known Web Attack Lab☆330Updated 4 years ago
- Apache Tomcat auto WAR deployment & pwning penetration testing tool.☆414Updated 7 months ago
- Exploit written in Python for CVE-2018-15473 with threading and export formats☆520Updated 4 months ago
- Herramienta para evadir disable_functions y open_basedir☆396Updated last year
- Exploitation for XSS☆703Updated 3 years ago
- A tool for embedding XXE/XML exploits into different filetypes☆1,038Updated 4 months ago
- Free web-application vulnerability and version scanner☆562Updated 3 months ago
- A Ruby framework designed to aid in the penetration testing of WordPress systems.☆1,018Updated 4 years ago
- A tool to find and exploit servers vulnerable to Shellshock☆333Updated last year
- This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtu…☆634Updated 5 years ago
- Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys☆585Updated last year
- Collection of Proof of Concepts and Potential Targets for #ShellShocker☆887Updated 4 years ago
- Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and conf…☆308Updated 3 years ago
- simple script to extract all web resources by means of .SVN folder exposed over network.☆450Updated 9 months ago
- A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by caus…☆425Updated 11 months ago
- Linux privilege escalation exploit via snapd (CVE-2019-7304)☆662Updated 5 years ago
- A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques☆709Updated 5 years ago
- A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-s…☆431Updated 3 years ago