gagliardetto / codebox

Related projects: ⓘ

• Contrast-Security-OSS / go-test-bench
  Intentionally vulnerable Go web app.
  ☆42Updated 9 months ago
• minight / h2csmuggler
  ☆27Updated 3 years ago
• JLLeitschuh / lgtm_hack_scripts
  Collection of python helper API's for interacting with LGTM.com in ways the official API doesn't support.
  ☆23Updated 2 years ago
• PalindromeLabs / Java-Deserialization-CVEs
  Compiled dataset of Java deserialization CVEs
  ☆60Updated 4 years ago
• vah13 / Oracle-BI-bugs
  ☆34Updated 5 years ago
• JavanXD / Demo-Exploit-Jackson-RCE
  Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.
  ☆17Updated 5 years ago
• jimen0 / differer
  differer finds how URLs are parsed by different languages in order to help bug hunters break filters
  ☆63Updated 4 years ago
• aurainfosec / xss_payloads
  XSS payloads for edge cases
  ☆34Updated 5 years ago
• ajxchapman / sshreverseshell
  Full TTY reverse shell over SSH
  ☆57Updated 4 years ago
• jfrancois / SDBF
  Smart DNS Brute Forcer
  ☆22Updated 12 years ago
• hhc0null / GhostRule
  Some exploits to bypass Safer Mode in Ghostscript
  ☆15Updated 3 years ago
• SaneBow / redirect-fuzzer
  Fuzzing script for redirect URL validator
  ☆48Updated 4 years ago
• GrrrDog / ZeroNights-WebVillage-2017
  ☆70Updated 6 years ago
• Metnew / write-ups
  ☆33Updated 2 years ago
• x41sec / BeanStack
  X41 BeanStack - Stack Trace Fingerprinting BETA
  ☆52Updated 3 years ago
• ramshazar / orangetsai-springboot-actuator-poc
  ☆27Updated 3 years ago
• gagliardetto / codemill
  CodeQL model generation for Go.
  ☆17Updated 3 years ago
• 0ang3el / Unsafe-JAX-RS-Burp
  Burp Suite extension for JAX-RS
  ☆65Updated 7 years ago
• GoSecure / break-fast-serial
  A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs
  ☆54Updated 7 years ago
• GrrrDog / ZeroNights-HackQuest-2016
  2 web tasks from ZeroNights HackQuest 2016
  ☆51Updated 7 years ago
• gagliardetto / lgtm-cli
  *Unofficial* lgtm.com CLI — Use at your own risk. Also don't add more than 3K projects to "My projects" list.
  ☆13Updated 2 years ago
• mpgn / CVE-2019-9580
  CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE
  ☆32Updated 5 years ago
• o2platform / DefCon_RESTing
  Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro
  ☆51Updated 11 years ago
• irsl / jackson-rce-via-spel
  An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions
  ☆121Updated 6 years ago
• maxence-schmitt / OfficeOpenXMLEditor
  Burp extension that add a tab to edit Office Open XML document (xlsx,docx,pptx)
  ☆12Updated 6 years ago
• RootUp / PHDays9
  My fuzzing workshop from PHDays9
  ☆27Updated 5 years ago
• PortSwigger / java-serialized-payloads
  YSOSERIAL Integration with burp suite
  ☆40Updated 2 years ago
• elespike / burp-cph
  Custom Parameter Handler extension for Burp Suite.
  ☆43Updated 3 years ago
• nccgroup / glasgo
  Go static analysis tool that checks for security issues using an AST.
  ☆28Updated 5 years ago
• wuntee / BurpAuthzPlugin
  ☆75Updated 11 years ago