403bypasser

403bypasser Türkçe 403bypasser , hedef sayfalardaki erişim kontrolü kısıtlamalarını aşmak için kullanılan teknikleri otomatikleştirir. Bu araç geliştirilmeye devam edecektir, katkılara açıktır. English 403bypasser automates the techniques used to circumvent access control restrictions on target...

goblin

libgoblin Documentation https://docs.rs/goblin/ changelog Usage Goblin requires rustc 1.85.0 Rust 2024 edition. Add to your Cargo.toml dependencies goblin = "0.10" Features awesome crate name zero-copy, cross-platform, endian-aware, ELF64/32 implementation - wow! zero-copy, cross-platform,...

PyRat

PyRat PyRat, an open-source remote control project based on Python XmlRPC, including a client and a server also called the control end, hereinafter collectively referred to as the server. Disclaimer: This project is for technical exchange only. Do not use it for commercial or illegal purposes. An...

minisign

Minisign A dead simple tool to sign files and verify signatures. Table of Contents Minisign Table of Contents Overview Documentation Installation Prebuilt Packages Building with Zig Building with CMake and GCC or Clang Usage Generating a Key Pair Signing Files Verifying Signatures Verification of...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

smolvm

smolvm Branchable microVMs for AI agents. Embed lightweight virtual machines into your software, portable dev environments, and local sandboxing. Install brew install smol-machines/tap/smolvm macOS Homebrew curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows: unzip the...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

Tiredful-API

What is Tiredful API? Tiredful API is intentionally designed broken app. The aim of this web app is to teach developers, QA or security professionals about flaws present in webservices REST API due to insecure coding practice. Who can use Tiredful API? Web developers Web Pentesters Security...

sniffnet

Application to comfortably monitor your Internet traffic. Cross-platform. Intuitive. Reliable. Translated in: 🇨🇳 🇩🇪 🇫🇷 🇷🇺 🇵🇹 🇪🇦 🇮🇹 🇵🇱 + 18 more languages Support Sniffnet's development 💖 Sniffnet is completely free, open-source software which needs lots of effort and time to develop and maintain...

VulnLab

VulnLab A web vulnerability lab project developed by Yavuzlar. Logo Vulnerabilities SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File Inclusion Broken...

xortool

xortool.py A tool to do some xor analysis: guess the key length based on count of equal chars guess the key base on knowledge of most frequent char Notice: xortool is now only running on Python 3. The old Python 2 version is accessible at the py2 branch. The pip package has been updated...

jsql-injection

Description jSQL Injection is a lightweight application used to find database information from a server. It's free , open source and cross-platform for Windows, Linux and Mac, and it works with Java from version 21 to 25. jSQL Injection is also part of the official penetration testing distributio...

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc

Wolfcms-v0.8.3.1-xss-POC-by-Provensec-llc WolfCMS-v0.8.3.1 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-11611...

Composr-CMS-10.0.13-Cross-Site-Scripting-XSS

Composr-CMS-10.0.13-Cross-Site-Scripting-XSS Composr CMS 10.0.13 Cross Site ScriptingXSS Assigned CVE Number: CVE-2018-6518...

CVE-2022-41445

CVE-2022-41445 Cross Site Scripting in Teacher's Record Management System using CodeIgnitor Suggested description A cross-site scripting XSS vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int...

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 Cross Site ScriptingXSS Assigned CVE Number: CVE-2017-9609...

PwnXSS

A powerful XSS scanner made in python 3.7 Installing Requirements: BeautifulSoup4 pip install bs4 requests pip install requests python 3.7 Commands: git clone https://github.com/pwn0sec/PwnXSS chmod 755 -R PwnXSS cd PwnXSS python3 pwnxss.py --help Usage Basic usage: python3 pwnxss.py -u...

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 Cross Site Scripting XSS Assigned CVE Number: CVE-2017-7188...

CVE-2022-38374

CVE-2022-38374 Text COpy from :https://vulners.com/cve/CVE-2022-38374...

CVE-2022-30513

CVE-2022-30513 School Dormitory Management System 1.0 - Reflected XSS Exploit Title: School Dormitory Management System 1.0 - Reflected XSS Date: 2022-05-25 CVE: CVE-2022-30513 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...