kozmic / laravel-poc-CVE-2018-15133

Related projects: ⓘ

• theMiddleBlue / CVE-2019-11043
  (PoC) Python version of CVE-2019-11043 exploit by neex
  ☆143Updated 4 years ago
• petercunha / jenkins-rce
  Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!
  ☆294Updated 5 years ago
• projectzeroindia / CVE-2019-11510
  Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
  ☆361Updated 4 years ago
• pyn3rd / CVE-2019-0232
  Apache Tomcat Remote Code Execution on Windows
  ☆185Updated 4 years ago
• breaktoprotect / CVE-2017-12615
  POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.
  ☆112Updated last year
• kacperszurek / exploits
  ☆257Updated 5 years ago
• milo2012 / CVE-2018-13379
  CVE-2018-13379
  ☆250Updated 5 years ago
• LoRexxar / redis-rogue-server
  Redis 4.x & 5.x RCE
  ☆138Updated 5 years ago
• lc / 230-OOB
  An Out-of-Band XXE server for retrieving file contents over FTP.
  ☆171Updated 4 years ago
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆326Updated 8 months ago
• tismayil / ohmybackup
  Scan Victim Backup Directories & Backup Files
  ☆178Updated 11 months ago
• LandGrey / abuse-ssl-bypass-waf
  Bypassing WAF by abusing SSL/TLS Ciphers
  ☆302Updated 3 years ago
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆343Updated last year
• milo2012 / CVE-2018-13382
  CVE-2018-13382
  ☆145Updated 5 years ago
• NytroRST / XSSFuzzer
  XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.
  ☆137Updated 5 years ago
• bayotop / off-by-slash
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆251Updated 2 years ago
• NickstaDB / SerialBrute
  Java serialization brute force attack tool.
  ☆123Updated 7 years ago
• adamyordan / cve-2019-1003000-jenkins-rce-poc
  Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (…
  ☆309Updated 5 years ago
• PortSwigger / command-injection-attacker
  SHELLING - a comprehensive OS command injection payload generator
  ☆104Updated 5 years ago
• ForbiddenProgrammer / CVE-2021-21315-PoC
  CVE 2021-21315 PoC
  ☆154Updated 3 years ago
• summitt / burp-ysoserial
  YSOSERIAL Integration with burp suite
  ☆160Updated last year
• ONsec-Lab / scripts
  Utils
  ☆264Updated 8 years ago
• doyensec / StandardizedImageProcessingTest
  A test suite built with Mocha/Chai to test for behavioral differences between image libraries for the web
  ☆68Updated 4 years ago
• irsdl / httpninja
  HTTP.ninja
  ☆147Updated last year
• joernchen / xxeserve
  XXE Out of Band Server.
  ☆168Updated last year
• m6a-UdS / ssrf-lab
  Lab for exploring SSRF vulnerabilities
  ☆245Updated 3 years ago
• artssec / burp-exporter
  Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.
  ☆169Updated 2 years ago
• pimps / CVE-2018-7600
  Exploit for Drupal 7 <= 7.57 CVE-2018-7600
  ☆124Updated 6 years ago
• NotSoSecure / docker_fetch
  Data extraction tool for Docker Registry API
  ☆123Updated 7 months ago
• huntergregal / PNG-IDAT-Payload-Generator
  Generate a PNG with a payload embedded in the IDAT chunk (Based off of previous concepts and code -- credit in README)
  ☆194Updated 11 months ago