Alternatives and similar repositories for phar-jpg-polyglot

Users that are interested in phar-jpg-polyglot are comparing it to the libraries listed below

• yeswehack / pp-finder
  PP-finder Help you find gadget for prototype pollution exploitation
  ☆180Updated last year
• PortSwigger / serialization-examples
  ☆42Updated last year
• rayhan0x01 / nodejs-websocket-sqli
  A simple NodeJS WebSocket WebApp vulnerable to blind SQL injection
  ☆70Updated 4 years ago
• teambi0s / dfunc-bypasser
  This tool is for letting you know how strong your disable_functions is and how you can bypass that.
  ☆140Updated 5 years ago
• ambionics / symfony-exploits
  Exploits targeting Symfony
  ☆208Updated last year
• roughiz / lfito_rce
  LFI to RCE via phpinfo() assistance or via controlled log file
  ☆72Updated 2 years ago
• mogwailabs / DNSrebinder
  A python based minimal DNS server to test/verify DNS rebinding attacks
  ☆63Updated 2 years ago
• Syzik / DockerRegistryGrabber
  Enumerate / Dump Docker Registry
  ☆180Updated last year
• mohinparamasivam / Sudo-1.8.31-Root-Exploit
  Root shell PoC for CVE-2021-3156
  ☆69Updated 4 years ago
• PortSwigger / portable-data-exfiltration
  This repo contains all the injections mentioned in my talk and enumerators.
  ☆130Updated last year
• HLOverflow / XXE-study
  This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…
  ☆112Updated last year
• Sybil-Scan / imagemagick-lfi-poc
  ImageMagick LFI PoC [CVE-2022-44268]
  ☆53Updated last year
• convisolabs / CVE-2021-22204-exiftool
  Python exploit for the CVE-2021-22204 vulnerability in Exiftool
  ☆94Updated 4 years ago
• silentsignal / rsa_sign2n
  Deriving RSA public keys from message-signature pairs
  ☆351Updated last year
• aadityapurani / NodeJS-Red-Team-Cheat-Sheet
  NodeJS Red-Team Cheat Sheet
  ☆220Updated 6 years ago
• intruder-io / guidtool
  A tool to inspect and attack version 1 GUIDs
  ☆238Updated 3 years ago
• wdahlenburg / werkzeug-debug-console-bypass
  Werkzeug has a debug console that requires a pin. It's possible to bypass this with an LFI vulnerability or use it as a local privilege e…
  ☆62Updated 2 years ago
• voidz0r / CVE-2022-44268
  A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read
  ☆217Updated 7 months ago
• j0lt-github / python-deserialization-attack-payload-generator
  Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpick…
  ☆125Updated last year
• srini0x00 / dvta
  Damn Vulnerable Thick Client App developed in C# .NET
  ☆163Updated 2 years ago
• VikasVarshney / ssti-payload
  SSTI Payload Generator
  ☆92Updated 3 years ago
• BKreisel / sqlmap-websocket-proxy
  Tool to enable blind sql injection attacks against websockets using sqlmap
  ☆66Updated 5 months ago
• epi052 / cve-2018-15473
  Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473
  ☆109Updated last year
• its-arun / Werkzeug-Debug-RCE
  Python script for exploiting Werkzeug Debug RCE useful for CTF
  ☆39Updated 5 years ago
• RoqueNight / LFI---RCE-Cheat-Sheet
  Transition form local file inclusion attacks to remote code exection
  ☆65Updated 5 years ago
• computer-engineer / WhiteboxPentest
  Whitebox source code review cheatsheet (Based on AWAE syllabus)
  ☆159Updated 3 years ago
• gh0x0st / OSWE-crawling-through-the-webs
  Becoming the spider, crawling through the webs to catch the fly.
  ☆78Updated 4 years ago
• d3k4z / burp-copy-as-ffuf
  Burp Extension that copies a request and builds a FFUF skeleton
  ☆111Updated 2 years ago
• bhaveshk90 / Content-Security-Policy-CSP-Bypass-Techniques
  Content-Security-Policy (CSP) Bypass Techniques
  ☆70Updated 4 years ago
• hussein98d / LFI-files
  Wordlist to bruteforce for LFI
  ☆126Updated 6 years ago