ptoomey3 / evilarc
Create tar/zip archives that can exploit directory traversal vulnerabilities
☆997Updated 3 years ago
Alternatives and similar repositories for evilarc:
Users that are interested in evilarc are comparing it to the libraries listed below
- A tool for embedding XXE/XML exploits into different filetypes☆1,075Updated 4 months ago
- Simple DNS Rebinding Service☆649Updated 5 years ago
- List DTDs and generate XXE payloads using those local DTDs.☆624Updated last year
- Herramienta para evadir disable_functions y open_basedir☆418Updated last year
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,618Updated 4 months ago
- A DNS rebinding attack framework.☆1,081Updated last month
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆861Updated 3 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,396Updated 6 months ago
- Automated script for performing Padding Oracle attacks☆769Updated 9 months ago
- BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source c…☆546Updated 2 years ago
- Finds unknown classes of injection vulnerabilities☆662Updated this week
- latest version of scanners for IIS short filename (8.3) disclosure vulnerability☆1,503Updated last year
- List of XSS Vectors/Payloads☆1,223Updated 3 months ago
- ☆983Updated last week
- Automated HTTP Request Repeating With Burp Suite☆868Updated 3 years ago
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆711Updated last year
- A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.☆709Updated 11 months ago
- Advanced Burp Suite Logging Extension☆656Updated 10 months ago
- ☆674Updated 2 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆595Updated 4 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆355Updated 8 months ago
- Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…☆1,015Updated 3 weeks ago
- HTTP file upload scanner for Burp Proxy☆489Updated last year
- Simple websites vulnerable to Server Side Template Injections(SSTI)☆391Updated 2 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,717Updated 11 months ago
- ☆1,318Updated last week
- Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys☆610Updated 2 months ago
- Burp plugin able to find reflected XSS on page in real-time while browsing on site☆1,151Updated 4 years ago
- ☆1,142Updated 7 years ago
- ☆688Updated 4 months ago