Dockerized PHP lab with file upload vulnerability challenges: bypass upload filters to achieve remote code execution.
☆59Mar 12, 2023Updated 3 years ago
Alternatives and similar repositories for file_upload_vulnerability_scenarios
Users that are interested in file_upload_vulnerability_scenarios are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Labs built in docker to cover NSE lessons☆14Sep 23, 2026Updated last month
- 💀 Linux local root exploit for CVE-2018-18955☆25Jan 20, 2022Updated 4 years ago
- LDAP Injection Vulnerability Application(Blog Sample Code)☆21Jun 9, 2026Updated 4 months ago
- Dockerized PHP lab: exploit a Local File Inclusion (LFI) vulnerability and escalate it to Remote Code Execution (RCE).☆11Jun 16, 2022Updated 4 years ago
- Burp Report Generator☆12Mar 1, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- There are android apps that helpful for reversing practice native libraries.☆10Aug 31, 2020Updated 6 years ago
- Simple PHP script to show IP, UserAgent and some other info like ifconfig.me do.☆11Mar 8, 2014Updated 12 years ago
- Just simple helper tool for generate github search link☆18Feb 28, 2021Updated 5 years ago
- App with Server Side Template Injection (SSTI) vulnerability - possible RCE - in Flask. Free vulnerable app for ethical hacking / penetra…☆17Sep 15, 2022Updated 4 years ago
- Socat compiled as static binary☆12Feb 12, 2017Updated 9 years ago
- One line command and control backdoors for APIs and web applications.☆52Apr 9, 2024Updated 2 years ago
- My course work about basic binary exploitation.🤿☆16Mar 16, 2022Updated 4 years ago
- Focused XSS fuzz scanner with smart payloads, reflection analysis, CSP checks, WAF hints, DOM sink detection, and optional browser valida…☆29Updated this week
- Mobile Mouse 3.6.0.4 could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation. By sendi…☆13Apr 2, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Reverse IP And Subdomain Scanner☆21May 16, 2021Updated 5 years ago
- Automated blind-xss search for Burp Suite☆23Mar 28, 2022Updated 4 years ago
- My Leetcode Problems' Solutions☆11Sep 7, 2023Updated 3 years ago
- A simple web app with a XXE vulnerability.☆230Nov 10, 2021Updated 4 years ago
- Vulnerabilities Exploitation On Ubuntu 22.04☆56May 16, 2023Updated 3 years ago
- Prototype Pollution - A detailed study + hands on lab.☆16Oct 11, 2022Updated 4 years ago
- Empowers the AI to perform penetration testing, vulnerability assessment, reconnaissance, and security reporting — all through natural la…☆19Updated this week
- CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to uploa…☆13Jan 7, 2025Updated last year
- cve-2022-42889 Text4Shell CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text ver…☆40Oct 18, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆11Oct 7, 2022Updated 4 years ago
- ☆10Mar 24, 2022Updated 4 years ago
- Repo for all the SKF Docker lab examples☆465Aug 2, 2024Updated 2 years ago
- Abuse Zabbix API to obtain Remote Command Execution on hosts☆18Jun 4, 2021Updated 5 years ago
- 😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.☆26May 23, 2023Updated 3 years ago
- Damn Vulnerable WordPress☆207Dec 23, 2023Updated 2 years ago
- OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious php codes.☆14Jan 20, 2021Updated 5 years ago
- Demonstrating the possibility of stealing the private data of Harvard students and professors <3☆11Dec 13, 2015Updated 10 years ago
- A collection of solutions for every PortSwigger Academy Lab (in progress)☆121Feb 22, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- POC for the CVE-2022-36944 vulnerability exploit☆11May 16, 2023Updated 3 years ago
- ☆18Oct 30, 2022Updated 3 years ago
- ☆14Jul 28, 2026Updated 3 months ago
- ☆14Nov 29, 2019Updated 6 years ago
- DIY minecraft jukebox that plays music disc via RFID cards☆12Aug 30, 2024Updated 2 years ago
- A Python-Based Tool for Reconnaissance and State Management of AD Principals☆27Apr 8, 2026Updated 6 months ago
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Jul 23, 2024Updated 2 years ago