immunIT / XIP
XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc.
☆75Updated 6 years ago
Alternatives and similar repositories for XIP:
Users that are interested in XIP are comparing it to the libraries listed below
- WhiteBox CMS analysis☆69Updated last year
- Disrupt WAF by abusing SSL/TLS Ciphers☆48Updated 6 years ago
- Hacking challenges☆32Updated 7 years ago
- Various tools for managing bug bounty recon and exploration.☆47Updated 2 years ago
- ☆97Updated 6 years ago
- Automatic remote/local file inclusion vulnerability analysis and exploit tool☆60Updated 5 years ago
- Test a network's egress controls with various levels of success and failure.☆104Updated 2 years ago
- Provide a shell-like interface for exploiting Remote File Inclusion vulnerabilities.☆46Updated 8 years ago
- a collection of payloads for common webapps☆73Updated 11 years ago
- Materials related to the 2017 BSides Las Vegas presentation☆51Updated 4 years ago
- Penetration Testing Tools Developed by AppSec Consulting.☆48Updated 6 years ago
- An interactive OOB XXE data exfiltration tool☆91Updated 7 years ago
- BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework☆26Updated 8 years ago
- The Outlook HTML Leak Test Project☆132Updated 6 years ago
- WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin☆63Updated 2 years ago
- The Unofficial Burp Extension for DNSDumpster.com☆70Updated 7 years ago
- Pillage a git repo found in an accessible web root☆61Updated 13 years ago
- Web Filter External Enumeration Tool (WebFEET)☆75Updated 10 years ago
- Subdomain brute force focused on speed and data serialization☆74Updated 2 years ago
- Simple tool collection for escalation to NT AUTHORITY\SYSTEM from recently disclosed Steam Client Zero Day☆38Updated 5 years ago
- Scripts, tools, and proof-of-concepts to aid in a penetration test.☆94Updated 4 years ago
- A web application for generating custom XSS payloads☆77Updated 5 years ago
- Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.☆44Updated 4 years ago
- GitBackdorizer (bad name, I know!) Is a proof of concept from Ulisses Castro's talk - 50 ton of backdoors (https://www.slideshare.net/uli…☆49Updated 6 years ago
- Endpoint for Out-of-Band Exfiltration (DNS & HTTP)☆92Updated 6 years ago
- Post-exploitation scripts for OS X persistence and privesc☆72Updated 7 years ago
- A Metasploit auto auxiliary script☆103Updated 2 years ago
- try privilege escalation changing sudo command☆119Updated 7 years ago
- ☆122Updated 7 years ago
- Very crude and poorly written HTTP(s) and SMTP bin☆93Updated 4 years ago