spaze / hashes
Magic hashes – PHP hash "collisions"
☆708Updated 7 months ago
Related projects ⓘ
Alternatives and complementary repositories for hashes
- A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.☆669Updated 6 months ago
- Simple DNS Rebinding Service☆627Updated 4 years ago
- Herramienta para evadir disable_functions y open_basedir☆396Updated last year
- CTFNote is a collaborative tool aiming to help CTF teams to organise their work.☆522Updated this week
- ☆698Updated last year
- Create tar/zip archives that can exploit directory traversal vulnerabilities☆976Updated 3 years ago
- Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.☆494Updated 6 months ago
- Deriving RSA public keys from message-signature pairs☆270Updated 6 months ago
- A script to automatically install Peda+pwndbg+GEF plugins for gdb☆400Updated last year
- ☆1,089Updated last year
- My CTF journey since 2015. Stats, writeups, code snippets, notes, challenges.☆527Updated 3 months ago
- Perfect Blue's CTF Writeups☆667Updated 4 months ago
- ☆655Updated 2 years ago
- Simple websites vulnerable to Server Side Template Injections(SSTI)☆374Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆804Updated 2 years ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆1,819Updated 10 months ago
- Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.☆1,738Updated 5 years ago
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆671Updated last year
- Yet another Stego Tool☆358Updated last year
- A semi-interactive PHP shell compressed into a single file.☆896Updated 6 years ago
- PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.☆3,248Updated last month
- rsatool can be used to calculate RSA and RSA-CRT parameters☆1,219Updated last month
- Automatic exploit generation for simple linux pwn challenges.☆317Updated last year
- detect stegano-hidden data in PNG & BMP☆1,327Updated 7 months ago
- ☆1,114Updated 7 years ago
- CTF Archives: Collection of CTF Challenges.☆879Updated this week
- Automated script for performing Padding Oracle attacks☆751Updated 4 months ago
- My notes on pwn☆261Updated 2 months ago
- Burp plugin able to find reflected XSS on page in real-time while browsing on site☆1,133Updated 3 years ago
- List DTDs and generate XXE payloads using those local DTDs.☆611Updated 9 months ago