Proof of concept demonstrating DNS rebinding to extract Wi-Fi credentials from Bang & Olufsen speakers.
☆81Aug 22, 2026Updated 2 months ago
Alternatives and similar repositories for dns-rebinding-PoC
Users that are interested in dns-rebinding-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Privesc Check☆20May 20, 2014Updated 12 years ago
- Burp Extender to add unique form tokens to scanner requests.☆14Nov 5, 2024Updated last year
- proof of concept to backdoor files from owncloud encryption module☆18Mar 26, 2016Updated 10 years ago
- Generate Keyboard Walk Dictionaries for cracking☆150Feb 16, 2016Updated 10 years ago
- Enumerate subdomains through Virustotal☆32Nov 2, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and ai…☆14Dec 17, 2018Updated 7 years ago
- Python DNS Exfiltration Tool - Domain Name Service File Transfer Protocol (DFTP) Client and Server. TODO: Integrate Lexer, Parser instead…☆14Sep 29, 2025Updated last year
- Application Security Vulnerability Periodic Table☆14Aug 25, 2014Updated 12 years ago
- Evil snippets of Underhanded Red Team tactics☆11Jul 5, 2017Updated 9 years ago
- Passive DHCP analyzer with OS fingerprinting on the LAN through DHCP☆13Nov 16, 2017Updated 8 years ago
- Custom Deserializer☆13Feb 1, 2017Updated 9 years ago
- Universal stack-based buffer overfow exploitation tool☆23May 7, 2014Updated 12 years ago
- An implementation of the DNS rebinding attack.☆16Apr 14, 2017Updated 9 years ago
- Study about HQL injection exploitation.☆52May 15, 2016Updated 10 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- REST/JSON interface to Burp Suite☆34Oct 12, 2020Updated 6 years ago
- "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protecti…☆137Dec 22, 2017Updated 8 years ago
- Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File☆161Aug 5, 2016Updated 10 years ago
- ☆13Aug 18, 2016Updated 10 years ago
- WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr …☆496Oct 3, 2024Updated 2 years ago
- This module is used to exploit startup script execution through Windows Group Policy settings when configured to run off of a remote SMB …☆22Feb 6, 2020Updated 6 years ago
- See here:☆44Dec 6, 2012Updated 13 years ago
- Various pentest scripts☆14Mar 17, 2014Updated 12 years ago
- scripts and tools☆13Jan 25, 2011Updated 15 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- everything in one place - the best description I could come up with ;)☆26Jun 24, 2020Updated 6 years ago
- ☆17Sep 26, 2016Updated 10 years ago
- Simple tool to check whether a website is clickjackable☆12Mar 28, 2021Updated 5 years ago
- Howtos, guides, etc.☆22May 9, 2023Updated 3 years ago
- A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers☆15Sep 4, 2014Updated 12 years ago
- ☆16Oct 23, 2015Updated 11 years ago
- Find subfolders in the Windows folder which have bad ACL and allow write and execute☆14Oct 20, 2015Updated 11 years ago
- ☆19Jul 24, 2021Updated 5 years ago
- Bash script to query Google Voice for available area codes and search available phone numbers.☆32Apr 28, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ViewState encoder/decoder Fiddler Plugin☆11Jul 9, 2009Updated 17 years ago
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- Ruby Oracle Security Scanner☆16Jul 9, 2012Updated 14 years ago
- Various tools, exploits and other short code snippets☆12Dec 25, 2018Updated 7 years ago
- Jython binding for Burp to facilitate realtime traffic analysis and modification using simple plugins.☆14Nov 1, 2012Updated 14 years ago
- Forked from joomscan-owasp at 26/02/2015 to add new functionality☆14Feb 26, 2015Updated 11 years ago
- http-dir-enum is a tool for finding content that is not linked on a website. Its main use is for finding directories that exist on a serv…☆15Jun 13, 2021Updated 5 years ago