fakhrizulkifli / Defeating-PHP-GD-imagecreatefromjpeg
Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()
☆148Updated 9 years ago
Related projects ⓘ
Alternatives and complementary repositories for Defeating-PHP-GD-imagecreatefromjpeg
- small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns☆319Updated 7 months ago
- Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromgif()☆121Updated 9 years ago
- php-fpm+Nginx RCE☆101Updated 4 years ago
- PoC for CVE-2018-15133 (Laravel unserialize vulnerability)☆248Updated 8 months ago
- ☆55Updated 6 years ago
- This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…☆346Updated 6 years ago
- Toolset for detecting reflected xss in websites☆109Updated 6 years ago
- Audit your PHP version for known CVEs and patches☆113Updated this week
- Demo project how to bypass the disable_functions security control of PHP on Linux☆24Updated 5 years ago
- An Out-of-Band XXE server for retrieving file contents over FTP.☆174Updated 4 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆253Updated 3 years ago
- Bypassing FILTER_SANITIZE_EMAIL & FILTER_VALIDATE_EMAIL filters in filter_var for SQL Injection ( xD )☆31Updated 5 years ago
- CVE-2018-13382☆145Updated 5 years ago
- Exploit for Drupal 7 <= 7.57 CVE-2018-7600☆130Updated 6 years ago
- Collection of vulnerable and fixed PHP synthetic test cases☆58Updated last year
- HTML5 WebSocket message fuzzer☆144Updated 5 years ago
- RIPS - A static source code analyser for vulnerabilities in PHP scripts☆311Updated 2 years ago
- PHP tool to scan ADOdb code for SQL Injections☆31Updated 8 years ago
- Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.☆171Updated 3 years ago
- This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is f…☆160Updated 2 years ago
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…☆280Updated 4 months ago
- ☆73Updated 6 years ago
- Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.☆117Updated 4 years ago
- HTTP.ninja☆147Updated last year
- XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.☆138Updated 5 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆98Updated 5 years ago
- Java serialization brute force attack tool.☆124Updated 7 years ago
- Scan Victim Backup Directories & Backup Files☆178Updated last year
- A Burp Extension designed to identify argument injection vulnerabilities.☆118Updated 5 years ago
- Atlassian JIRA Template injection vulnerability RCE☆93Updated 5 years ago