Maintaining account persistence via XSS and Oauth
☆77Jan 7, 2019Updated 7 years ago
Alternatives and similar repositories for XSSOauthPersistence
Users that are interested in XSSOauthPersistence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp Suite extension to help make Graphql request more readable☆29Dec 7, 2017Updated 8 years ago
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- Small Python library that makes it easy to exploit race conditions in web apps with Requests.☆161May 22, 2023Updated 3 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆266Nov 18, 2021Updated 4 years ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆124May 12, 2026Updated 3 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆64Apr 17, 2020Updated 6 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago
- Reverse engineers GQL Schema and generates template payloads☆46Apr 5, 2019Updated 7 years ago
- Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP …☆72Aug 11, 2021Updated 5 years ago
- DOM XSS scanner for Single Page Applications☆421Nov 15, 2025Updated 9 months ago
- Library Secruity dependency Checker☆11Sep 13, 2019Updated 6 years ago
- Useful Powershell modules.☆11Mar 10, 2017Updated 9 years ago
- ☆331Jan 8, 2018Updated 8 years ago
- Totally legitimate☆11May 15, 2019Updated 7 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A mini webserver with FTP support for XXE payloads☆345Jan 3, 2024Updated 2 years ago
- A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers☆279Oct 29, 2018Updated 7 years ago
- CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4☆68Feb 3, 2020Updated 6 years ago
- ☆51Sep 7, 2017Updated 8 years ago
- Python library created while solving the Matasano Cryptopals challenges☆17Jun 17, 2021Updated 5 years ago
- All the content from my Troopers 19 talk☆10Mar 20, 2019Updated 7 years ago
- A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.☆548Jun 12, 2017Updated 9 years ago
- Funnel is a lightweight yara-based feed scraper☆38May 22, 2023Updated 3 years ago
- BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolu…☆61Oct 8, 2017Updated 8 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Automated blind-xss search for Burp Suite☆283Oct 10, 2019Updated 6 years ago
- Make XSS Great Again☆31Nov 29, 2019Updated 6 years ago
- XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04☆12Oct 16, 2018Updated 7 years ago
- How To Execute Shellcode via HTA☆140Feb 23, 2018Updated 8 years ago
- A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.☆76Feb 23, 2020Updated 6 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 4 years ago
- Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys☆670Feb 1, 2025Updated last year
- JShell - Get a JavaScript shell with XSS.☆530May 5, 2019Updated 7 years ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- XSS payloads for edge cases☆34Nov 13, 2018Updated 7 years ago
- OpenVPN Connect for Windows (MSI) - 3.1.0.361 - Privilege Escalation☆25Feb 28, 2020Updated 6 years ago
- Parse X509 certificates to get the (sub)domains in it.☆28Jun 14, 2018Updated 8 years ago
- ZIP File Raider - Burp Extension for ZIP File Payload Testing☆71Aug 31, 2020Updated 6 years ago
- ☆34Nov 2, 2022Updated 3 years ago
- POC for CVE-2018-15685☆42Aug 24, 2018Updated 8 years ago
- X-Forwarded-For [403 forbidden] enumeration☆100May 3, 2024Updated 2 years ago