securi3ytalent / xray-automation
A complete security assessment tool that supports common web security issues scanning and custom POC | Be sure to read the document before using.
☆19Updated 3 months ago
Alternatives and similar repositories for xray-automation:
Users that are interested in xray-automation are comparing it to the libraries listed below
- Burp extension used to snip any header from all the requests.☆22Updated last year
- Mass Exploit - CVE-2024-29824 - Ivanti EPM - Remote Code Execution (RCE)☆29Updated 6 months ago
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal☆14Updated 8 months ago
- An Vulnerability detection and Exploitation tool for CVE-2024-24919☆23Updated 7 months ago
- Burp extension to track your current IP address. Extension focused for red teams where the attacker needs to log all used IP addresses.☆25Updated last year
- CVE-2024-29895 PoC - Exploiting remote command execution in Cacti servers using the 1.3.X DEV branch builds☆21Updated 8 months ago
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆14Updated last year
- ☆13Updated 9 months ago
- POC for CVE-2024-40348. Will attempt to read /etc/passwd from target☆28Updated 5 months ago
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Updated 5 months ago
- Enumerate SSN (System Service Numbers or Syscall ID) and syscall instruction address in ntdll module by parsing the PEB of the current pr…☆19Updated 11 months ago
- Unauthorized Access to Metadata and User Data like CTF☆26Updated last month
- DLink DIR-846 Authenticated Remote Code Execution☆18Updated last year
- Nuclei template to detect Apache servers vulnerable to CVE-2024-38473☆27Updated 4 months ago
- Repo for all my exploits/PoCs☆30Updated 4 months ago
- Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…☆25Updated 5 months ago
- A BurpSuite extension for vulnerability Scanning☆25Updated 11 months ago
- aiohttp LFI (CVE-2024-23334)☆24Updated 9 months ago
- Exploit for CVE-2024-5009☆12Updated 6 months ago
- POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal☆12Updated last month
- Proof of Concept Exploit for CVE-2024-9465☆27Updated 3 months ago
- Monitor your target continuously for new subdomains!☆26Updated last year
- ☆18Updated 6 months ago
- CVE-2023-38389 < Wordpress < JupiterX Core < Unauthenticated Account Takeover☆27Updated 5 months ago
- This script is designed to exploit a heap buffer overflow vulnerability in a socks5 proxy server.☆22Updated 10 months ago
- ☆25Updated last month
- ManageEngine ADManager Command Injection☆12Updated last year
- ☆12Updated last year
- A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities☆63Updated 10 months ago