Maintaining account persistence via XSS and Oauth
☆77Jan 7, 2019Updated 7 years ago
Alternatives and similar repositories for XSSOauthPersistence
Users that are interested in XSSOauthPersistence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆63Apr 17, 2020Updated 6 years ago
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- Small Python library that makes it easy to exploit race conditions in web apps with Requests.☆161May 22, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Useful Powershell modules.☆11Mar 10, 2017Updated 9 years ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆122May 12, 2026Updated 5 months ago
- Reverse engineers GQL Schema and generates template payloads☆46Apr 5, 2019Updated 7 years ago
- DOM XSS scanner for Single Page Applications☆423Nov 15, 2025Updated 11 months ago
- ☆331Jan 8, 2018Updated 8 years ago
- This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.☆75Nov 5, 2020Updated 6 years ago
- A python library to automate time-based blind SQL injection☆50Sep 15, 2019Updated 7 years ago
- Python library created while solving the Matasano Cryptopals challenges☆17Jun 17, 2021Updated 5 years ago
- A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.☆549Jun 12, 2017Updated 9 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆51Sep 7, 2017Updated 9 years ago
- A mini webserver with FTP support for XXE payloads☆344Jan 3, 2024Updated 2 years ago
- Small script to check a list of domains against open redirect vulnerability☆30Jan 22, 2022Updated 4 years ago
- An interactive multi-user web JS shell☆364Jun 28, 2022Updated 4 years ago
- Automated blind-xss search for Burp Suite☆281Oct 10, 2019Updated 7 years ago
- Make XSS Great Again☆31Nov 29, 2019Updated 6 years ago
- A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers☆278Oct 29, 2018Updated 8 years ago
- BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolu…☆61Oct 8, 2017Updated 9 years ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Parse X509 certificates to get the (sub)domains in it.☆28Jun 14, 2018Updated 8 years ago
- A centralized dashboard for running and scheduling WordPress scans powered by wpscan utility.☆76Feb 23, 2020Updated 6 years ago
- unicode abnormalizer to takes a unicode string and abnormalizes it by character replacment☆26Jun 27, 2020Updated 6 years ago
- ☆12Jun 16, 2021Updated 5 years ago
- This application is developed to test the race condition vulnerability in the web application. We have discussed about this vulnerability…☆14Oct 1, 2016Updated 10 years ago
- CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4☆68Feb 3, 2020Updated 6 years ago
- A tool for checking a hash:pass pot file for hashes from a user:hash file☆12Oct 23, 2016Updated 10 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- JShell - Get a JavaScript shell with XSS.☆530May 5, 2019Updated 7 years ago
- Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.☆39Jan 20, 2023Updated 3 years ago
- Apache use after free bug infos / ASAN stack traces☆66Jan 21, 2019Updated 7 years ago
- Pentest environment scaffolding. Supporting role in Kali Linux.☆13Jun 23, 2020Updated 6 years ago
- differer finds how URLs are parsed by different languages in order to help bug hunters break filters☆63May 3, 2020Updated 6 years ago
- Race Condition framework☆274Dec 7, 2022Updated 3 years ago
- Win32k Elevation of Privilege Poc☆24May 17, 2019Updated 7 years ago