Alternatives and similar repositories for phar-jpg-polyglot

Users that are interested in phar-jpg-polyglot are comparing it to the libraries listed below

• yeswehack / pp-finder
  PP-finder Help you find gadget for prototype pollution exploitation
  ☆180Updated last year
• teambi0s / dfunc-bypasser
  This tool is for letting you know how strong your disable_functions is and how you can bypass that.
  ☆141Updated 6 years ago
• PortSwigger / serialization-examples
  ☆42Updated last year
• mogwailabs / DNSrebinder
  A python based minimal DNS server to test/verify DNS rebinding attacks
  ☆67Updated 2 years ago
• Syzik / DockerRegistryGrabber
  Enumerate / Dump Docker Registry
  ☆180Updated last year
• mohinparamasivam / Sudo-1.8.31-Root-Exploit
  Root shell PoC for CVE-2021-3156
  ☆70Updated 4 years ago
• ambionics / symfony-exploits
  Exploits targeting Symfony
  ☆208Updated last year
• rayhan0x01 / nodejs-websocket-sqli
  A simple NodeJS WebSocket WebApp vulnerable to blind SQL injection
  ☆70Updated 4 years ago
• HLOverflow / XXE-study
  This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…
  ☆112Updated last year
• Sybil-Scan / imagemagick-lfi-poc
  ImageMagick LFI PoC [CVE-2022-44268]
  ☆53Updated 2 years ago
• convisolabs / CVE-2021-22204-exiftool
  Python exploit for the CVE-2021-22204 vulnerability in Exiftool
  ☆94Updated 4 years ago
• voidz0r / CVE-2022-44268
  A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read
  ☆217Updated 7 months ago
• roughiz / lfito_rce
  LFI to RCE via phpinfo() assistance or via controlled log file
  ☆72Updated 2 years ago
• intruder-io / guidtool
  A tool to inspect and attack version 1 GUIDs
  ☆238Updated 3 years ago
• j0lt-github / python-deserialization-attack-payload-generator
  Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpick…
  ☆126Updated last year
• aadityapurani / NodeJS-Red-Team-Cheat-Sheet
  NodeJS Red-Team Cheat Sheet
  ☆220Updated 6 years ago
• wdahlenburg / werkzeug-debug-console-bypass
  Werkzeug has a debug console that requires a pin. It's possible to bypass this with an LFI vulnerability or use it as a local privilege e…
  ☆62Updated 2 years ago
• srini0x00 / dvta
  Damn Vulnerable Thick Client App developed in C# .NET
  ☆164Updated 2 years ago
• silentsignal / rsa_sign2n
  Deriving RSA public keys from message-signature pairs
  ☆355Updated last year
• epi052 / cve-2018-15473
  Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473
  ☆109Updated last year
• PortSwigger / portable-data-exfiltration
  This repo contains all the injections mentioned in my talk and enumerators.
  ☆130Updated last year
• computer-engineer / WhiteboxPentest
  Whitebox source code review cheatsheet (Based on AWAE syllabus)
  ☆159Updated 3 years ago
• bmdyy / tudo
  TUDO - A vulnerable PHP Web Application
  ☆122Updated 2 years ago
• Ambrotd / XXE-Notes
  XXE techniques
  ☆12Updated 4 years ago
• VikasVarshney / ssti-payload
  SSTI Payload Generator
  ☆92Updated 3 years ago
• wdahlenburg / interactsh-collaborator
  Burpsuite plugin for Interact.sh
  ☆228Updated last year
• GoSecure / xxe-workshop
  Workshop given at Hack in Paris 2019
  ☆125Updated 2 years ago
• d3k4z / burp-copy-as-ffuf
  Burp Extension that copies a request and builds a FFUF skeleton
  ☆111Updated 2 years ago
• s0j0hn / AWAE-OSWE-Prep
  ☆132Updated 4 years ago
• its-arun / Werkzeug-Debug-RCE
  Python script for exploiting Werkzeug Debug RCE useful for CTF
  ☆39Updated 5 years ago