filipkarc / ssti-flask-hacking-playgroundView external linksLinks
App with Server Side Template Injection (SSTI) vulnerability - possible RCE - in Flask. Free vulnerable app for ethical hacking / penetration testing training.
☆16Sep 15, 2022Updated 3 years ago
Alternatives and similar repositories for ssti-flask-hacking-playground
Users that are interested in ssti-flask-hacking-playground are comparing it to the libraries listed below
Sorting:
- Scan4all Pro,Distributed, more optimized and faster☆13Oct 15, 2022Updated 3 years ago
- goby使用的go lib☆17Aug 5, 2021Updated 4 years ago
- LDAP Injection Vulnerability Application(Blog Sample Code)☆22Oct 4, 2018Updated 7 years ago
- Automatically scan jar packages by using ast to find fastjson gadgets. In particular, this project is limited to mining Gadgets that may …☆49Mar 8, 2022Updated 3 years ago
- Bybit API client library for Go (ByBit API connector)☆10Dec 19, 2025Updated last month
- A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228☆29Jul 20, 2022Updated 3 years ago
- ☆11Mar 25, 2024Updated last year
- ☆10Jun 16, 2021Updated 4 years ago
- Fast subdomains enumeration tool for penetration testers☆30Feb 6, 2023Updated 3 years ago
- A NoSQL Injectable Node App☆42Jun 8, 2021Updated 4 years ago
- A proof of concept for Joomla's CVE-2015-8562 vulnerability (Object Injection RCE)☆10May 3, 2024Updated last year
- Metasploit framework via HTTP services☆10Jul 31, 2021Updated 4 years ago
- cmd tools for AWD☆14Jun 10, 2023Updated 2 years ago
- Herramienta para spamear correos electrónicos creada con Python y SMTP, se necesita un correo electrónico de Outlook para poder usar la h…☆15May 1, 2023Updated 2 years ago
- Final year project in Magshimim, focusing on Python development and Web Exploitation.☆10Apr 29, 2023Updated 2 years ago
- Jenkins WebInspect Plugin Publisher provides the ability to upload a WebInspect scan file, from your Jenkins server to your Fortify Softw…☆11Dec 23, 2025Updated last month
- goby对应的api☆34Mar 27, 2020Updated 5 years ago
- Native powerpc-apple-darwin8.11.0 gcc and friends.☆11Mar 25, 2025Updated 10 months ago
- fofa+xray vul scan golang☆10Sep 19, 2021Updated 4 years ago
- Converts burp's sitemap to sulley's fuzzing script☆11Aug 30, 2015Updated 10 years ago
- Fork of NextBSD's libxpc for Darling build☆14May 23, 2024Updated last year
- Priv8 Tools Software Mass Dork Auto Exploit.☆13Feb 1, 2023Updated 3 years ago
- 一款用Go实现的批量加载漏洞检测插件进行多线程扫描的框架。☆11Jan 20, 2024Updated 2 years ago
- Pghostile is a tool to automate the exploitation of PostgreSQL® specific vulnerabilities that could lead to privilege escalation. It can …☆11Aug 17, 2023Updated 2 years ago
- ☆13Nov 30, 2023Updated 2 years ago
- ☆11Feb 10, 2022Updated 4 years ago
- An patch porting qwingraph (wingraph written in qt4) to qt5.☆10Aug 21, 2019Updated 6 years ago
- XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04☆13Oct 16, 2018Updated 7 years ago
- A google dork parser that bypasses captcha's automatically.☆17Jul 15, 2025Updated 7 months ago
- 基于 ajaxfileupload.js 文件的增强版 ajaxfileupload.js☆11Apr 8, 2019Updated 6 years ago
- Counter-Strike 1.6 Dedicated Server☆10Dec 31, 2022Updated 3 years ago
- Describe how to use ffuf different options with examples☆13Jun 13, 2022Updated 3 years ago
- Webapp builder: The easy (and fast) way to create a web project☆13Jul 3, 2017Updated 8 years ago
- Quake Command-Line Application With Golang☆10Jul 20, 2023Updated 2 years ago
- A playground website to learn how different parts of the scrollbar UI can be customized☆11Jun 15, 2025Updated 8 months ago
- Remote Code Execution EJS Web Applications using express-fileupload☆11Aug 17, 2021Updated 4 years ago
- cpufuzz is a dumb, simple and portable CPU fuzzer☆11Jan 27, 2019Updated 7 years ago
- powerpc processor prototype and an example of semiconductor startup biz plan☆14Feb 2, 2019Updated 7 years ago
- Tools that run inside the guest☆11Jan 2, 2020Updated 6 years ago