paralax / lfi-labsLinks
small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
☆334Updated last year
Alternatives and similar repositories for lfi-labs
Users that are interested in lfi-labs are comparing it to the libraries listed below
Sorting:
- Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()☆151Updated 10 years ago
- Content hijacking proof-of-concept using Flash, PDF and Silverlight☆384Updated 6 years ago
- SHELLING - a comprehensive OS command injection payload generator☆445Updated 5 years ago
- RIPS - A static source code analyser for vulnerabilities in PHP scripts☆358Updated 9 years ago
- HTTP file upload scanner for Burp Proxy☆490Updated last year
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆521Updated 5 years ago
- Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…☆456Updated 3 years ago
- From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras☆427Updated 5 years ago
- Lab for exploring SSRF vulnerabilities☆248Updated 4 years ago
- ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)☆292Updated 2 years ago
- AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.☆630Updated last year
- Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.☆436Updated 3 years ago
- Add headers to all Burp requests to bypass some WAF products☆331Updated 7 years ago
- RIPS - A static source code analyser for vulnerabilities in PHP scripts☆320Updated 3 years ago
- Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).☆509Updated 3 years ago
- SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...☆232Updated 5 years ago
- In progress rough solutions to bWAPP / bee-box☆177Updated 5 years ago
- 💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002☆352Updated 6 years ago
- J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…☆667Updated last year
- XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.☆140Updated 6 years ago
- Exploitation for XSS☆723Updated 4 years ago
- simple script to extract all web resources by means of .SVN folder exposed over network.☆476Updated last year
- Another way to bypass WAF Cheat Sheet (draft)☆428Updated 6 years ago
- Lesser Known Web Attack Lab☆331Updated 5 years ago
- PoC for CVE-2018-15133 (Laravel unserialize vulnerability)☆252Updated last year
- There is no pre-auth RCE in Jenkins since May 2017, but this is the one!☆604Updated 6 years ago
- XXE Out of Band Server.☆170Updated 2 years ago
- A penetration testing tool for finding file upload bugs (NDSS 2020)☆249Updated 4 years ago
- This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…☆356Updated 5 months ago
- ☆265Updated 6 years ago