Demo of various ways to exploit post based reflected XSS
☆18Jul 6, 2023Updated 3 years ago
Alternatives and similar repositories for postBasedXSS
Users that are interested in postBasedXSS are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Piper Burp Suite Extender plugin☆17Jan 15, 2026Updated 9 months ago
- A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.☆10Apr 8, 2024Updated 2 years ago
- JavaScript functions intended to be used as an XSS payload against a WordPress admin account.☆58Oct 6, 2020Updated 6 years ago
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆42Apr 23, 2024Updated 2 years ago
- Simple PoC for demonstrating Race Conditions on Websockets☆54Sep 14, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- KERnano: The No-install Python Pen Testing kit. (Windows & Linux)☆13Sep 2, 2022Updated 4 years ago
- Collection of notes, useful resources, list of tools and scripts related to threat detection, digital forensics and incident response.☆14Oct 20, 2026Updated last week
- Get all AD objects which are hidden from you☆18Aug 21, 2017Updated 9 years ago
- ☆39Oct 20, 2023Updated 3 years ago
- Mine URLs from Browser's Heap Snapshot for fun and profit☆68Aug 9, 2023Updated 3 years ago
- experimental wildcard subdomain filtering prototype☆14Aug 5, 2023Updated 3 years ago
- Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability☆62Jun 12, 2023Updated 3 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 3 years ago
- 致远OA通过发送特殊请求获取管理员cookie，再通过文件上传接口上传webshell压缩文件，最后发送解压请求获取webshell☆10Apr 11, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- POC Pdf-exploit builder on C#☆12Mar 1, 2024Updated 2 years ago
- A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing☆142Jun 27, 2023Updated 3 years ago
- Improve automated and semi-automated active scanning in Burp Pro☆12Jun 13, 2025Updated last year
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- Log4j_dos_CVE-2021-45105☆13Dec 19, 2021Updated 4 years ago
- Session Hijacking Visual Exploitation☆218Mar 7, 2024Updated 2 years ago
- This Burp Suite extension enables the generation of shareable links to specific requests which other Burp Suite users can import.☆13May 20, 2022Updated 4 years ago
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆39Dec 12, 2023Updated 2 years ago
- ☆20Aug 4, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Burp Suite's extension to scan and crawl Single Page Applications☆106Apr 14, 2023Updated 3 years ago
- In 'n Out - See what goes in and comes out of PEs☆35May 12, 2022Updated 4 years ago
- CVE-2026-34486 Apache Tomcat EncryptInterceptor 绕过漏洞复现（使用GLM5.1复现完成）☆12Apr 15, 2026Updated 6 months ago
- Let's check if your target is vulnerable for client side prototype pollution.☆64Jan 9, 2024Updated 2 years ago
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆13Dec 29, 2020Updated 5 years ago
- Web page preview and analysis tool☆12Jan 11, 2023Updated 3 years ago
- MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts☆83Feb 4, 2023Updated 3 years ago
- This extension provides a way to discover NoSQL injection vulnerabilities.☆11Feb 1, 2021Updated 5 years ago
- ☆13Oct 31, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Hadoken: A versatile Active Directory pentesting tool engineered to identify vulnerabilities and streamline security assessments.☆46Oct 26, 2025Updated last year
- JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users…☆485Jul 9, 2026Updated 3 months ago
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆229May 22, 2023Updated 3 years ago
- LogSnare: A playground for testing, preventing, and logging IDOR vulnerabilities.☆35Mar 4, 2024Updated 2 years ago
- ☆14Jun 27, 2020Updated 6 years ago
- A Firefox Web Extension to improve the discovery of DOM XSS.☆294Nov 13, 2024Updated last year
- Python 3 alternative command line interface for AWS Route 53; enables simple record management and dynamic DNS☆11Updated this week