Alternatives and similar repositories for web-shells

Users that are interested in web-shells are comparing it to the libraries listed below

• feakk / xxxpwn
  Advanced XPath Injection Tool
  ☆34Updated 10 years ago
• DiabloHorn / DiabloHorn
  Projects and POCs
  ☆60Updated 10 years ago
• hdm / 2017-BSidesLV-Modern-Recon
  Materials related to the 2017 BSides Las Vegas presentation
  ☆52Updated 4 years ago
• superkojiman / rfishell
  Provide a shell-like interface for exploiting Remote File Inclusion vulnerabilities.
  ☆46Updated 8 years ago
• EnableSecurity / Webapp-Exploit-Payloads
  a collection of payloads for common webapps
  ☆73Updated 12 years ago
• tahmed11 / strutsy
  Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability
  ☆10Updated 6 years ago
• digininja / sitediff
  Fingerprint a web app using local files as the fingerprint sources
  ☆38Updated 7 years ago
• gwen001 / testxss
  PHP tool to test XSS
  ☆22Updated 5 years ago
• incredibleindishell / Local-file-disclosure-SQL-Injection-Lab
  This is sample code to demonstrate how one can use SQL Injection vulnerability to download local file from server in specific condition. …
  ☆44Updated 8 years ago
• gradiuscypher / bounty_tools
  Various tools for managing bug bounty recon and exploration.
  ☆47Updated 2 years ago
• infosec-au / webappsec-toolkit
  Web Application Security related tools. Includes backdoors, proof of concepts and tricks
  ☆37Updated 10 years ago
• matthewdfuller / intellifuzz-xss
  An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match
  ☆42Updated 12 years ago
• Sw4mpf0x / Tools
  Pentesting Tools
  ☆22Updated 3 years ago
• x90skysn3k / listmap
  Create lists from nmap output.
  ☆13Updated 4 years ago
• Charliedean / PsexecSpray
  Spray SMB with hashes, Then psexec
  ☆32Updated 5 years ago
• arvinddoraiswamy / ThickClientScripts
  My IDA scripts, tips and testing techniques for Thick Client applications.
  ☆17Updated 10 years ago
• skorov / subdomainator
  Stay on top of new domains! Bug bounty hunters can use this tool to receive Pushbullet notifications each time there is a new target subd…
  ☆26Updated 7 years ago
• securelayer7 / csv-injection-vulnerable-php-script-
  CSV injection Vulnerable Script.
  ☆29Updated 7 years ago
• omercnet / BurpJDSer-ng
  BurpJDSer-ng
  ☆28Updated 2 weeks ago
• AonCyberLabs / Nmap-Scripts
  ☆47Updated 9 years ago
• nccgroup / dotnetpaddingoracle
  Python Implementation of a .NET Padding Oracle Assessment Tool
  ☆30Updated 9 years ago
• cornerpirate / iRecon
  Of the thousands of lazy reconnaissance scripts, this one is by far the one in this repository.
  ☆11Updated 4 years ago
• incredibleindishell / LDAP-credentials-collector-backdoor-generator
  This script generate backdoor code which log username password of an user who have passed HTTP basic auth using LDAP credentials.
  ☆58Updated 8 years ago
• silentsignal / ActiveScan3Plus
  Modified version of ActiveScan++ Burp Suite extension
  ☆31Updated 8 years ago
• michenriksen / nmap-scripts
  A collection of Nmap NSE scripts that I made.
  ☆27Updated 12 years ago
• chousensha / linux_privcheck
  Check privileges, settings and other information on Linux systems and suggest exploits based on kernel versions
  ☆25Updated 7 years ago
• packetfocus / RubyOSINT
  Ruby based script to perform application scanning of a URL, looking for specific pages to target.
  ☆26Updated 10 years ago
• SimplySecurity / simplydomain
  Subdomain brute force focused on speed and data serialization
  ☆74Updated 2 years ago
• SpiderLabs / BurpNotesExtension
  Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created d…
  ☆67Updated 11 months ago
• superkojiman / dirtshell
  Provide a sort of shell-ish interface to make file directory traversal quicker and easier.
  ☆24Updated 8 years ago