small set of scripts to practice exploit XSS and CSRF vulnerabilities
☆67Dec 22, 2017Updated 8 years ago
Alternatives and similar repositories for xss-labs
Users that are interested in xss-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Lab for exploring SSRF vulnerabilities☆249May 30, 2021Updated 5 years ago
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆38Nov 8, 2017Updated 8 years ago
- Cross-Site Scripting (XSS) is one of the most well known web application vulnerabilities. It even has a dedicated chapter in the OWASP To…☆12Jan 30, 2023Updated 3 years ago
- 一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo☆817Nov 28, 2022Updated 3 years ago
- Python tool for expired domain discovery in crossdomain.xml files☆23Feb 21, 2017Updated 9 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- PassWord List Maker☆17Oct 29, 2018Updated 8 years ago
- XSS HTTP Inject0r is a proof of concept tool that shows how XSS (Cross Site Scripting) flags can be exploited easily. It is written in H…☆24Jul 23, 2014Updated 12 years ago
- 在Sublist3r基础上优化一个python工具，用于枚举使用OSINT的网站的子域。它有助于渗透测试人员和漏洞猎手收集并收集他们所针对的域名的子域名。Sublist3r使用Google，Yahoo，Bing，百度和Ask等许多搜索引擎来枚举子域名。Sublist3r还使…☆13May 14, 2018Updated 8 years ago
- JitterBug passively searches for Basic Info, open ports, potential CVE's on the given Target IP in third party databases without Direct i…☆13Jun 22, 2026Updated 4 months ago
- Spring-Boot app for demonstrating security vulnaribilities☆13Aug 21, 2019Updated 7 years ago
- My collection of exploit development skeletons for fuzzing, overwriting the stack, remote code execution, etc.☆16Mar 19, 2025Updated last year
- small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns☆335Apr 8, 2024Updated 2 years ago
- This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. …☆42Mar 14, 2017Updated 9 years ago
- 一个垃圾桶☆59Aug 14, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- Command line interface (CLI) to install Kali Linux Tools in your desired distribution.☆12May 27, 2022Updated 4 years ago
- 网站路径扫描，python版御剑(增加代理，延时功能)☆16Mar 3, 2018Updated 8 years ago
- Sample vulnerable code and its exploit code☆187Mar 14, 2021Updated 5 years ago
- Removes duplicate entries from a file, resulting in only unique parameter combinations. Useful for parsing waybackurls and making recon m…☆11May 31, 2020Updated 6 years ago
- LKM Rootkit based on Diamorphine☆16Oct 31, 2018Updated 8 years ago
- Generate Random Reset Instagram URLs and check if they still valid for a complete account takeover☆14Apr 26, 2022Updated 4 years ago
- Vulnerability consolidation and management tool, enhances scan results by merging different findings of the same weakness across multiple…☆25Dec 16, 2022Updated 3 years ago
- ☆14Jun 27, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- web cache poison - Top 1 web hacking technique of 2019☆25Feb 24, 2020Updated 6 years ago
- TomcatBrute tool☆12Nov 4, 2016Updated 9 years ago
- A small python script to check for Cross-Site Tracing (XST)☆132Jan 23, 2016Updated 10 years ago
- Vulnerable web application☆80Feb 17, 2026Updated 8 months ago
- A parallel scanner that utilises axiom to spin up servers and parallel scan using masscan.☆17Jul 1, 2020Updated 6 years ago
- 存放一些自己写过的漏洞利用脚本☆48Jul 21, 2019Updated 7 years ago
- Java漏洞练习程序，开发工具Eclipse，运行环境Java 1.7以上版本，Tocmat7以上。☆54Oct 25, 2018Updated 8 years ago
- A lab for playing with NoSQL Injection☆138Feb 23, 2026Updated 8 months ago
- Fiddler2 Plugin for AMF format parsing☆14May 9, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆800Aug 21, 2023Updated 3 years ago
- WackoPicko is a vulnerable web application used to test web application vulnerability scanners.☆354May 25, 2024Updated 2 years ago
- A quick and dirty way to bypass encrypted EPA to connect to a NetScaler Gateway☆20Oct 11, 2019Updated 7 years ago
- my 1998-2014 program code☆13Feb 1, 2026Updated 9 months ago
- ZVulDrill靶场二次开发，增加了一些常见PHP漏洞，一直在更新。☆30Jun 9, 2017Updated 9 years ago
- Lab set-up for learning SQL Injection Techniques☆100Dec 6, 2020Updated 5 years ago
- Package manager for hackers built by hackers☆37Aug 31, 2018Updated 8 years ago