This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.
☆93Dec 29, 2023Updated 2 years ago
Alternatives and similar repositories for XXElixir
Users that are interested in XXElixir are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains.…☆21Dec 29, 2023Updated 2 years ago
- Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit☆18Jun 3, 2024Updated 2 years ago
- Cfd (Cloudflare detector) is a tool that allows you to check one or more domains to see if they are protected by CloudFlare or not. The c…☆17Mar 30, 2023Updated 3 years ago
- Tool to retrieve Config from Redline C2 servers☆16Mar 14, 2023Updated 3 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆376Jul 25, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- My own Custom nuclei templates☆26Jun 23, 2026Updated 4 months ago
- Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Buil…☆247Feb 4, 2026Updated 8 months ago
- Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager☆16Jan 21, 2023Updated 3 years ago
- ☆15Apr 5, 2023Updated 3 years ago
- A repo containing some tooling build to assist with reverse engineering malware samples☆16Jul 22, 2023Updated 3 years ago
- WebDirScan is a tool for brute-forcing URIs (directories and files) on web servers by taking input directory to scan for files & director…☆11Mar 31, 2023Updated 3 years ago
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit☆26Dec 29, 2023Updated 2 years ago
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆905May 3, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automated HTTP Request Repeating With Burp Suite☆38Apr 3, 2023Updated 3 years ago
- "XSS automation tool helps hackers identify and exploit cross-site scripting vulnerabilities in web apps. Tests for reflected and persist…☆91Jul 26, 2024Updated 2 years ago
- bounty collection☆47Sep 1, 2024Updated 2 years ago
- Go scanner to find web cache poisoning vulnerabilities in a list of URLs☆149Feb 21, 2024Updated 2 years ago
- Juniper Firewalls CVE-2023-36845 - RCE☆55Dec 29, 2023Updated 2 years ago
- A curated list wordlists for bruteforcing and fuzzing☆88Apr 3, 2023Updated 3 years ago
- ☆14Feb 7, 2024Updated 2 years ago
- A collection of js analysis tools & scripts.☆19May 4, 2026Updated 5 months ago
- Automatic Bug finder with buprsuite☆167Mar 6, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,386Aug 7, 2025Updated last year
- JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various e…☆52Apr 29, 2024Updated 2 years ago
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Jan 2, 2025Updated last year
- Extract JavaScript files from burp suite project with ease.☆98Feb 19, 2022Updated 4 years ago
- List of fresh and validated DNS resolvers updated every 12h.☆24Updated this week
- A Raspberry Pi-based Ethernet implant that bypasses 802.1X and allows the same IP address to be used in parallel. presented on x33fcon 20…☆18Aug 6, 2026Updated 2 months ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Oct 15, 2021Updated 5 years ago
- Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table to redirect all traffic to Burp Sui…☆113Apr 30, 2023Updated 3 years ago
- A fast tool to scan SAAS,PAAS App written in Go☆85Feb 13, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆760Jul 10, 2026Updated 3 months ago
- XML-RPC Vulnerability Checker and Directory Fuzzer☆24Sep 28, 2023Updated 3 years ago
- Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second修复内存溢出等bug☆15Nov 25, 2023Updated 2 years ago
- Unicode Security Toolkit☆39Oct 7, 2024Updated 2 years ago
- A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidde…☆451Apr 24, 2026Updated 6 months ago
- Create your own recon & vulnerability scanner with Trickest and GitHub☆47Sep 25, 2023Updated 3 years ago
- Playground for Race Condition attack☆24Mar 18, 2023Updated 3 years ago