paralax / xss-labs
small set of scripts to practice exploit XSS and CSRF vulnerabilities
☆60Updated 7 years ago
Alternatives and similar repositories for xss-labs
Users that are interested in xss-labs are comparing it to the libraries listed below
Sorting:
- Happy Hunting☆137Updated 6 years ago
- Easy Fast recon script☆29Updated 5 years ago
- Weblogic Upload Vuln(Need username password)-CVE-2019-2618☆172Updated 6 years ago
- burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz☆63Updated 6 years ago
- Jsdir is a Burp Suite extension that extracts hidden paths from js files and beautifies it for further reading.☆117Updated 4 years ago
- A tool for automatically testing whether the upload function can upload webshell☆55Updated 4 years ago
- CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE☆106Updated 5 years ago
- ☆78Updated 10 years ago
- 网上收集的一些利用工具☆18Updated last year
- J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tes…☆75Updated 3 years ago
- Apache Tomcat Remote Code Execution on Windows - CGI-BIN☆77Updated 6 years ago
- Decode the cookies set by balancer F5, and disclousure all pool ip☆78Updated 5 years ago
- Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12☆94Updated 2 years ago
- Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…☆110Updated 6 years ago
- CVE-2019-6340-Drupal SA-CORE-2019-003☆32Updated 6 years ago
- Burp Suite Plugin: Convert the json text that returns the body into HTTP request parameters.☆102Updated 3 years ago
- A Burp-Extension can hunt some keywords that might leak sensitive information.☆26Updated 5 years ago
- ☆127Updated 3 years ago
- ☆106Updated 8 years ago
- Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages☆44Updated 3 years ago
- WAF Bypass Cheatsheet☆213Updated 7 years ago
- Directory transversal to remote code execution☆69Updated 5 years ago
- CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script☆138Updated 6 years ago
- JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution 漏洞批量检测☆67Updated 9 years ago
- ******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-01…☆111Updated 7 years ago
- Web Fuzzing Discovery and Attack Pattern Database☆114Updated 7 years ago
- Java serialization brute force attack tool.☆123Updated 7 years ago
- Atlassian JIRA Template injection vulnerability RCE☆93Updated 5 years ago
- A Burp extension for generic extraction and reuse of data within HTTP requests and responses.☆92Updated 3 years ago
- XSS Scan☆104Updated 11 years ago