Alternatives and similar repositories for XXEpayload

Users that are interested in XXEpayload are comparing it to the libraries listed below

• tdy218 / ysoserial-cve-2018-2628
  Some codes for bypassing Oracle WebLogic CVE-2018-2628 patch
  ☆114Updated 7 years ago
• coffeehb / struts2_check
  一个用于识别目标网站是否采用Struts2框架开发的工具demo
  ☆163Updated 7 years ago
• l3m0n / WebFuzzAttack
  web模糊测试 - 将漏洞可能性放大
  ☆148Updated 6 years ago
• coco413 / DiscoverSubdomain
  前渗透信息探测工具集-子域名
  ☆137Updated 7 years ago
• SecWiki / VulScritp
  内网渗透脚本
  ☆73Updated 8 years ago
• 5alt / VulHint
  VulHint是辅助代码审计的 sublime text 3 插件
  ☆67Updated 6 years ago
• wh1t3p1g / Struts2Environment
  Struts2 历史版本的漏洞环境
  ☆84Updated 8 years ago
• QAX-A-Team / redis_lua_exploit
  ☆143Updated 6 years ago
• dmchell / metasploit-framework
  Metasploit Framework
  ☆42Updated 8 years ago
• zhinaonet / bypass_disablefunc_via_LD_PRELOAD
  ☆65Updated 6 years ago
• nnewkin / Poc_Pentest
  ☆1Updated 3 years ago
• jas502n / fuzz-wooyun-org
  WooYun Fuzz 库
  ☆108Updated 8 years ago
• virink / vMysqlMonitoring
  vMysqlMonitoring
  ☆73Updated 6 years ago
• l3m0n / XSS-Filter-Evasion-Cheat-Sheet-CN
  XSS_Filter_Evasion_Cheat_Sheet 中文版
  ☆78Updated 11 years ago
• kovige / NetScan
  配合reGeorg使用的内网扫描工具
  ☆62Updated 8 years ago
• QAX-A-Team / SerialWriter
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.
  ☆104Updated 7 years ago
• neverlovelynn / chrome_headless_xss
  A plugin to check xss by using chrome_headless
  ☆52Updated 6 years ago
• threedr3am / tomcat-cluster-session-sync-exp
  tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484…
  ☆213Updated 5 years ago
• lijiejie / struts2_045_scan
  Struts2-045 Scanner
  ☆74Updated 7 years ago
• imp0wd3r / Scanner
  端口扫描 + 敏感文件扫描 + POC批量调用框架
  ☆56Updated 6 years ago
• jas502n / CVE-2018-3191
  Weblogic-CVE-2018-3191远程代码命令执行漏洞
  ☆66Updated 6 years ago
• wudicainiao / AWVS12-Scan-Agent
  a AWVS12 api tool
  ☆121Updated 4 years ago
• coffeehb / OCIFT
  一个半自动化命令注入漏洞Fuzz工具(One Semi-automation command injection vulnerability Fuzz tool)
  ☆92Updated 7 years ago
• NoneNotNull / SSRFX
  CVE-2014-4210+Redis未授权访问
  ☆97Updated 8 years ago
• Tycx2ry / docker_api_vul
  docker 未授权访问漏洞利用脚本
  ☆139Updated 9 years ago
• Medicean / SuperTerm
  利用 webshell 创建交互式终端(Create an interactive terminal with webshell.)
  ☆58Updated 5 years ago
• njcx / pocsuite_poc_collect
  collection poc use pocsuite framework 收集一些 poc with pocsuite框架
  ☆157Updated 6 years ago
• S9MF / Xss_Test
  记录个人XSS学习
  ☆105Updated 4 years ago
• Leezj9671 / SecDevices_docker
  自行编写的工作中使用到的安全设备Dockerfile
  ☆98Updated 4 years ago
• hanc00l / weblogic_unserialize_exploit
  java unserialize vul for weblogic exploit
  ☆175Updated 6 years ago