mchklt / csrf-file-upload-pocLinks
This PoC showcases how an attacker can exploit a CSRF vulnerability to upload a file to a victim's account without their knowledge. The attack leverages the victim's session or performs unauthorized actions on their behalf.
☆10Updated last year
Alternatives and similar repositories for csrf-file-upload-poc
Users that are interested in csrf-file-upload-poc are comparing it to the libraries listed below
Sorting:
- ☆16Updated last month
- my nuclei templates☆41Updated last year
- ☆34Updated 3 years ago
- ☆47Updated 2 months ago
- My custom created nuclei for SQLi, bugbounty, pentesting☆26Updated 3 months ago
- collect robots.txt endpoint for allowed and disallowed endpoints from a list of subdomains☆15Updated 2 years ago
- ☆17Updated last year
- ☆40Updated 3 years ago
- This tool checks if the given Url/File has Swagger Ui, That can be tested later..☆37Updated 2 years ago
- DepFine Is a tool to find the unregistered dependency based on dependency confusion valunerablility and lead to RCE☆29Updated 3 years ago
- output burp body only and auto pretiffy☆16Updated 3 months ago
- ☆75Updated 11 months ago
- ☆22Updated 2 years ago
- Simple Automation script for juniper cve-2023-36845☆17Updated last year
- Nuclei Templates☆24Updated 10 months ago
- Authorization-Nuclei-Templates☆40Updated 11 months ago
- BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!☆29Updated last year
- ☆100Updated 2 years ago
- ☆22Updated 2 weeks ago
- Stay on the beat with SubHound - receive notifications for new subdomains on Telegram and Discord! 🐶🎵☆17Updated 2 years ago
- Ultimate Wordlist for Web Content Discovery☆67Updated 3 months ago
- This Burp extension extracts various data (path, parameter keys, parameter values, subdomains, etc.) from the sitemap. This data is used …☆38Updated 3 years ago
- ☆27Updated last year
- A collection of Bug Bounty Tips collected from GitHub to all bug bounty hunters☆28Updated last year
- Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.☆26Updated last year
- 🔍LeakScanner - Inspired by Gitleaks☆12Updated last year
- Simple tool to gather domains from crt.sh using the organization name☆100Updated 3 years ago
- About Recon Tools,Methodology and writeups☆18Updated last year
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆37Updated 3 weeks ago
- get all nuclei temp from emad shanab repo in one run☆36Updated 2 years ago