JavaScript functions intended to be used as an XSS payload against a WordPress admin account.
☆58Oct 6, 2020Updated 6 years ago
Alternatives and similar repositories for WP-XSS-Admin-Funcs
Users that are interested in WP-XSS-Admin-Funcs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A BurpSuite plugin for BBRF☆27Nov 17, 2024Updated last year
- Demo of various ways to exploit post based reflected XSS☆18Jul 6, 2023Updated 3 years ago
- A tool to bruteforce nameservers when working with subdomain delegations to AWS.☆58Aug 22, 2019Updated 7 years ago
- Ruby On Rails unrestricted render() exploit☆16Feb 9, 2018Updated 8 years ago
- Burp Suite Extensions☆13Oct 19, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scan secrets from Continuous Integration Build Logs☆53Oct 14, 2019Updated 7 years ago
- URL-encode data streams via commandline☆14Oct 26, 2019Updated 7 years ago
- ☆12Oct 2, 2022Updated 4 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆11Apr 9, 2021Updated 5 years ago
- Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application p…☆13Jun 4, 2022Updated 4 years ago
- Go tool to perform DNS rebinding☆23Nov 1, 2018Updated 7 years ago
- A better dns bruteforcer written in golang☆13Nov 4, 2018Updated 7 years ago
- Generate Mimikatz Golden Ticket commands with ease!☆53Dec 4, 2020Updated 5 years ago
- XSS payloads designed to turn alert(1) into P1☆1,405Sep 12, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Stay within program scope☆37Aug 17, 2022Updated 4 years ago
- AWS security checklist for myself☆17Mar 12, 2018Updated 8 years ago
- a .js scanner, built in php. designed to scrape urls and other info☆228Aug 22, 2017Updated 9 years ago
- The Serverless Blind XSS App☆339Mar 28, 2026Updated 7 months ago
- Exploit for Jenkins serialization vulnerability - CVE-2016-0792☆47Aug 2, 2017Updated 9 years ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 3 years ago
- ☆27Jul 30, 2021Updated 5 years ago
- Electron JS Browser To Find XSS Vulnerabilities Automatically☆747Mar 30, 2021Updated 5 years ago
- Default plugins for Jaeles Scanner☆38Nov 5, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Automatic tool for DNS rebinding-based SSRF attacks☆309Aug 21, 2020Updated 6 years ago
- You can read the writeup on this script here☆271Jul 12, 2020Updated 6 years ago
- Workflow for pentesting web applications.☆21Feb 19, 2019Updated 7 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆519Jun 22, 2022Updated 4 years ago
- Scan and categorize websites for rapid triage☆12Jun 23, 2022Updated 4 years ago
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago
- A collection of scripts to extend Burp Suite☆142Apr 8, 2019Updated 7 years ago
- Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common m…☆76Mar 22, 2024Updated 2 years ago
- Tool for making it easy to collect dns results from the CLI☆40Aug 14, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Search for secrets inside user data attached to EC2 instances on multiple AWS accounts☆16Jun 19, 2024Updated 2 years ago
- your bestfried for finding LinkedIn Employees on github☆15Mar 28, 2023Updated 3 years ago
- Fetch known urls from AlienVault's Open Threat Exchange for given hosts☆63Jul 22, 2019Updated 7 years ago
- RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.☆373Apr 14, 2022Updated 4 years ago
- IDS/IPS malware download evasion☆15Feb 21, 2019Updated 7 years ago
- DNS and Target HTTP History Local Storage and Search☆63Feb 14, 2021Updated 5 years ago
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 7 years ago