A simple web app with a XXE vulnerability.
☆230Nov 10, 2021Updated 4 years ago
Alternatives and similar repositories for xxelab
Users that are interested in xxelab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple websites vulnerable to Server Side Template Injections(SSTI)☆423Mar 16, 2023Updated 3 years ago
- Practice hacking JWT tokens☆118Sep 8, 2022Updated 4 years ago
- Labs built in docker to cover NSE lessons☆14Sep 23, 2026Updated last month
- A NoSQL Injectable Node App☆39Jun 8, 2021Updated 5 years ago
- This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…☆116Mar 22, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆799Aug 21, 2023Updated 3 years ago
- Simple HS256, HS384 & HS512 JWT token brute force cracker.☆1,183Jul 13, 2024Updated 2 years ago
- ☆248Jun 6, 2018Updated 8 years ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆332Mar 27, 2024Updated 2 years ago
- Burp Suite extension for parsing Swagger web service definition files☆20Jul 15, 2025Updated last year
- Enhanced fork with logging, OpenAPI 3.0 and Python 3 for security monitoring workshops☆47Feb 16, 2024Updated 2 years ago
- A mini webserver with FTP support for XXE payloads☆344Jan 3, 2024Updated 2 years ago
- LDAP Injection Vulnerability Application(Blog Sample Code)☆21Jun 9, 2026Updated 4 months ago
- Damn Vulnerable WordPress☆207Dec 23, 2023Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Lab that will help you to understand how type juggling vulnerability works.☆22Sep 23, 2020Updated 6 years ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,215Apr 21, 2024Updated 2 years ago
- String or worldlist encoder for use in fuzzing or web application testing☆19Sep 2, 2019Updated 7 years ago
- GraphQL security workshop labs☆124Jan 31, 2026Updated 9 months ago
- ☆17May 7, 2021Updated 5 years ago
- Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…☆461Dec 6, 2021Updated 4 years ago
- ☆200Jun 6, 2019Updated 7 years ago
- A simple PHP application to learn SQL Injection detection and exploitation techniques.☆138Oct 18, 2022Updated 4 years ago
- ☆851Nov 13, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Repo for OSWE related video content for @SecAura Youtube Channel☆39Feb 21, 2022Updated 4 years ago
- ☆24Jan 26, 2021Updated 5 years ago
- ☆16Sep 6, 2017Updated 9 years ago
- All known and unknown public POC's for wordpress themes and plugins☆78Jun 23, 2021Updated 5 years ago
- The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.☆1,308Jul 12, 2026Updated 3 months ago
- Simple XXE test suite generated specifically for SAML interfaces☆23May 18, 2018Updated 8 years ago
- JSON RSA to HMAC and None Algorithm Vulnerability POC☆63Feb 24, 2020Updated 6 years ago
- ☆91Sep 2, 2026Updated 2 months ago
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,813Dec 1, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- small set of scripts to practice exploit XSS and CSRF vulnerabilities☆67Dec 22, 2017Updated 8 years ago
- Resolve and quickly portscan a list of (sub)domains.☆90Jul 4, 2016Updated 10 years ago
- CTF Writeups☆12Feb 25, 2023Updated 3 years ago
- Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.☆38Nov 21, 2025Updated 11 months ago
- Generate users list using certain format☆22Jan 23, 2019Updated 7 years ago
- An Out-of-Band XXE server for retrieving file contents over FTP.☆184May 27, 2020Updated 6 years ago
- ☆31Apr 6, 2021Updated 5 years ago