Exploiting XSS with Javascript/JPEG Polyglot (by @medusa_0xf)
☆21Apr 8, 2022Updated 4 years ago
Alternatives and similar repositories for jpeg_polyglot_xss
Users that are interested in jpeg_polyglot_xss are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Blind RCE fuzzer☆15Jul 25, 2023Updated 2 years ago
- Magic Header Blind Xss tool (deliver blind xss payloads in request headers).☆25May 30, 2021Updated 4 years ago
- ☆11Apr 18, 2022Updated 3 years ago
- ☆25Mar 5, 2023Updated 3 years ago
- All kind of frida stuff when needed in pentesting or reverse engineering of an android app - The perfect starter kit☆18Jun 2, 2020Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Clickjacking PoC Generator☆35Oct 1, 2020Updated 5 years ago
- A Burp Suite extension for scraping JavaScript source maps.☆44Aug 19, 2023Updated 2 years ago
- Web Application Firewall (WAF) Detector☆35Mar 13, 2023Updated 3 years ago
- PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22☆29May 5, 2023Updated 2 years ago
- Checks if an Android application has successfully completed the "App Link Verification" process for Android App Links.☆69Dec 4, 2025Updated 4 months ago
- A simple way to setup IoT project using Arduino board and ESP8266.☆10Dec 1, 2016Updated 9 years ago
- Exploit for Symfony CVE-2024-50340 (forked eos)☆29Nov 22, 2024Updated last year
- Extract data from a .git directory.☆15Mar 28, 2023Updated 3 years ago
- Remote CLI tools at your fingertips☆16Jul 31, 2024Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆19Apr 28, 2024Updated last year
- Useful scripts for pen testing. Require modification to run☆13Oct 17, 2020Updated 5 years ago
- CTFd plugin allowing for individual Docker containers per user or team☆10Oct 14, 2024Updated last year
- The all-in-one hacking toolbox for hardware penetration testing.☆18Jun 4, 2024Updated last year
- Virtual host brute forcer☆22Jan 10, 2014Updated 12 years ago
- Burp Suite extension to easily export sub domains☆12Dec 2, 2019Updated 6 years ago
- PS3 .sprx how to bypass authentication using another .sprx☆10Feb 15, 2021Updated 5 years ago
- Experiments, snippets and other things related to Binary Ninja☆17Oct 22, 2024Updated last year
- dead-simple blog template powered by Markdown and PHP☆10May 6, 2025Updated 11 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆15May 6, 2023Updated 2 years ago
- Tourist is an HTTP API around Microsoft Playwright for CTF challenges☆13Jun 25, 2025Updated 9 months ago
- ☆11Jun 30, 2025Updated 9 months ago
- bounty collection☆43Sep 1, 2024Updated last year
- header-fuzz allows you to fuzz any HTTP header with a wordlist and evaluate success or failure based on the returning HTTP status code.☆16Apr 15, 2020Updated 6 years ago
- A penetration testing tool for firestore databases☆13Nov 5, 2020Updated 5 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆13May 10, 2022Updated 3 years ago
- Dump all available paths and/or endpoints on WADL file.☆98Nov 24, 2025Updated 4 months ago
- ☆15Apr 9, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆17Dec 14, 2022Updated 3 years ago
- CRLFMap is a tool to find HTTP Splitting vulnerabilities☆25Jul 31, 2020Updated 5 years ago
- Tool to create XSS PDF files☆69Jun 6, 2024Updated last year
- Related subdomains finder☆28May 18, 2022Updated 3 years ago
- Cross Injector — A Python Script for Cross-Site Scripting (XSS) Detection☆41Sep 3, 2025Updated 7 months ago
- A command line tool to brute-force websites using cookies crafted with flask-unsign.☆12Apr 6, 2023Updated 3 years ago
- My gfPatterns☆15Aug 31, 2021Updated 4 years ago