A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes
☆43Nov 28, 2025Updated 8 months ago
Alternatives and similar repositories for archive_pwn
Users that are interested in archive_pwn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool to dump users's .plist on a Mac OS system and to convert them into a crackable hash☆53Oct 12, 2024Updated last year
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- gRPC / gRPC-Web Pentest Practicing Lab☆10Aug 29, 2023Updated 2 years ago
- Security tool against dependency typosquatting attacks☆55Aug 5, 2026Updated last week
- Dump Kerberos tickets from the KCM database of SSSD☆59Dec 31, 2025Updated 7 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Java archive implant toolkit.☆62Apr 20, 2025Updated last year
- Secrets scanner that understands code☆193Nov 2, 2023Updated 2 years ago
- Crash repro minifier for ASan-instrumented commandline tools.☆12Dec 29, 2019Updated 6 years ago
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated 3 weeks ago
- PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…☆33Dec 26, 2023Updated 2 years ago
- Tricard - Malware Sandbox Fingerprinting☆24Dec 11, 2023Updated 2 years ago
- ☆14Jun 7, 2017Updated 9 years ago
- Microsoft Graph API post-exploitation toolkit☆95Jul 13, 2024Updated 2 years ago
- Web Path Finder☆60Nov 22, 2023Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- self-hosted Azure OSINT tool☆35Jun 24, 2025Updated last year
- V2G evaluation tool☆23May 7, 2025Updated last year
- Linux CS bypass technique☆33Feb 4, 2025Updated last year
- Dump Linux keyrings☆24Jul 15, 2024Updated 2 years ago
- Semgrep-based Policy Controller for Kubernetes☆47Apr 4, 2025Updated last year
- Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts☆149Updated this week
- SLSA level 3 action☆12Apr 26, 2024Updated 2 years ago
- VulnSeer combines the power of Nmap's service detection with multiple AI providers to deliver intelligent vulnerability assessments. Unli…☆43Jun 12, 2025Updated last year
- RepoReaper is an automated tool crafted to meticulously scan and identify exposed .git repositories within specified domains and their su…☆35Feb 20, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.☆22May 9, 2023Updated 3 years ago
- ☆39Jul 19, 2026Updated 3 weeks ago
- A tool to investigate Dependency Confusion in Artifactory☆24May 15, 2025Updated last year
- Nuclei template for CVE-2024-23897 (Jenkins LFI Vulnerability)☆22Feb 5, 2024Updated 2 years ago
- ☆30Mar 23, 2026Updated 4 months ago
- Modular web-application honeypot platform built using go and gin☆63May 8, 2024Updated 2 years ago
- Semgrep rules to identify GWT attack surface☆12Apr 28, 2022Updated 4 years ago
- Quickly Implement Mod-Rewrite in your infastructure☆87Apr 21, 2017Updated 9 years ago
- ysoserial.net docker image☆33Sep 23, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Powerful Network Reconnaissance Tool for Security Professionals☆107Dec 29, 2024Updated last year
- Azure DevOps Services Attack Toolkit☆155Jul 27, 2026Updated 2 weeks ago
- JXA script for Mythic that prints the TCC.db☆15Apr 18, 2021Updated 5 years ago
- A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.☆33Oct 13, 2024Updated last year
- Scripts for: How to Build a Covert Pentesting Infrastructure Almost Free☆22Jan 15, 2026Updated 7 months ago
- Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.☆30Apr 3, 2025Updated last year
- A GraphQL enumeration and extraction tool☆134Jan 29, 2023Updated 3 years ago