Alternatives and similar repositories for phar-jpg-polyglot:

Users that are interested in phar-jpg-polyglot are comparing it to the libraries listed below

• teambi0s / dfunc-bypasser
  This tool is for letting you know how strong your disable_functions is and how you can bypass that.
  ☆119Updated 5 years ago
• d3k4z / burp-copy-as-ffuf
  Burp Extension that copies a request and builds a FFUF skeleton
  ☆108Updated last year
• roughiz / lfito_rce
  LFI to RCE via phpinfo() assistance or via controlled log file
  ☆60Updated last year
• PortSwigger / serialization-examples
  ☆39Updated last year
• yeswehack / pp-finder
  PP-finder Help you find gadget for prototype pollution exploitation
  ☆146Updated 5 months ago
• rayhan0x01 / nodejs-websocket-sqli
  A simple NodeJS WebSocket WebApp vulnerable to blind SQL injection
  ☆69Updated 3 years ago
• hussein98d / LFI-files
  Wordlist to bruteforce for LFI
  ☆118Updated 5 years ago
• mohinparamasivam / Sudo-1.8.31-Root-Exploit
  Root shell PoC for CVE-2021-3156
  ☆63Updated 3 years ago
• BKreisel / sqlmap-websocket-proxy
  Tool to enable blind sql injection attacks against websockets using sqlmap
  ☆58Updated last year
• HLOverflow / XXE-study
  This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…
  ☆103Updated 9 months ago
• neex / ghostinthepdf
  ☆158Updated 3 years ago
• mishmashclone / timip-OSWE
  https://github.com/timip/OSWE
  ☆19Updated 5 years ago
• KTH-LangSec / server-side-prototype-pollution
  A collection of Server-Side Prototype Pollution gadgets and exploits
  ☆151Updated 4 months ago
• mogwailabs / DNSrebinder
  A python based minimal DNS server to test/verify DNS rebinding attacks
  ☆37Updated last year
• Sybil-Scan / imagemagick-lfi-poc
  ImageMagick LFI PoC [CVE-2022-44268]
  ☆52Updated last year
• borjmz / aspx-reverse-shell
  Aspx reverse shell
  ☆98Updated 4 years ago
• ambionics / symfony-exploits
  Exploits targeting Symfony
  ☆197Updated 3 months ago
• NotSoSecure / NotSoCereal-Lab
  NotSoCereal: A Deserialization exploit playground
  ☆51Updated 3 years ago
• wdahlenburg / werkzeug-debug-console-bypass
  Werkzeug has a debug console that requires a pin. It's possible to bypass this with an LFI vulnerability or use it as a local privilege e…
  ☆52Updated 2 years ago
• gh0x0st / OSWE-crawling-through-the-webs
  Becoming the spider, crawling through the webs to catch the fly.
  ☆72Updated 3 years ago
• CanardMandarin / csp-bypass
  Need any help bypassing CSP ?
  ☆25Updated 4 years ago
• j0lt-github / python-deserialization-attack-payload-generator
  Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpick…
  ☆104Updated last year
• dbrwsky / Nuclei-BurpExtension
  Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.
  ☆117Updated last year
• mpgn / CVE-2019-7609
  RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer
  ☆54Updated 5 years ago
• CaptainFreak / Web-CTF-Challenges
  Collection of quirky behaviours of code and the CTF challenges that I made around them.
  ☆27Updated 3 years ago
• AethliosIK / reset-tolkien
  Unsecure time-based secret exploitation and Sandwich attack implementation Resources
  ☆128Updated last month
• GoSecure / xxe-workshop
  Workshop given at Hack in Paris 2019
  ☆121Updated last year
• PortSwigger / js-miner
  This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.
  ☆54Updated last year
• svdwi / OSWE-Labs-Poc
  Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...
  ☆96Updated 3 years ago
• Syzik / DockerRegistryGrabber
  Enumerate / Dump Docker Registry
  ☆166Updated 9 months ago