reDOM

reDOM root@kitploit: ██████╗ ███████╗██████╗ ██████╗ ███╗ ███╗ ██╔══██╗██╔════╝██╔══██╗██╔═══██╗████╗ ████║ ██████╔╝█████╗ ██║ ██║██║ ██║██╔████╔██║ ██╔══██╗██╔══╝ ██║ ██║██║ ██║██║╚██╔╝██║ ██║ ██║███████╗██████╔╝╚██████╔╝██║ ╚═╝ ██║ ╚═╝ ╚═╝╚══════╝╚═════╝ ╚═════╝ ╚═╝ ╚═╝ A Burp Suite extension...

xsssniper

XSSSNIPER xsssniper 是一个方便的 XSS 发现工具，具有批量扫描功能。 使用方法： root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use --threads=THREADS number of threads...

xsssniper

XSSSNIPER xsssniper is an handy xss discovery tool with mass scanning functionalities. Usage: root@kitploit: Usage: xsssniper.py options Options: -h, --help show this help message and exit -u URL, --url=URL target URL --post try a post request to target url --data=POSTDATA post data to use...

jsonorg-fp3

Falso positivo de json.org CVE-2022-45688 El proyecto contiene una dependencia json.org con CVE-2022-45688. Invoca la clase vulnerable, pero los datos de entrada están sanitizados con un método simple de contar caracteres , estimando así la profundidad máxima del árbol DOM a generar, y aplicando...

brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

htcap

HTCAP htcap 是一个能够通过拦截 Ajax 调用和 DOM 变化递归爬取单页应用程序（SPA）的 Web 应用扫描器。 主要功能 递归 DOM 爬取引擎 发现 ajax/fetch/jsonp/websocket 请求 支持 cookies、代理、自定义头部、HTTP 认证等 基于文本相似性的启发式页面去重引擎 可脚本化的登录序列 所有发现结果保存到 SQLite 数据库，并可导出为交互式 HTML 报告 内置的模糊测试器可检测 SQL 注入、XSS、命令执行、文件泄露等多种漏洞 可以轻松与 Sqlmap、Arachni、Wapiti、Burp 等众多工具接口...

htcap

HTCAP htcap is a web application scanner able to crawl single page application SPA recursively by intercepting ajax calls and DOM changes. KEY FEATURES Recursive DOM crawling engine Discovers ajax/fetch/jsonp/websocket requests Supports cookies, proxy, custom headers, http auth and more Heuristic...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

CVE-2020-13889

Author: Andre k Lorenci Contact: [email protected] CVE-2020-13889 Hello, this vulnerability consists in a function called showAlert in the administration panel of bludit,that when accessed in DOM, allows users define the text to be popped up in the message box. But this function dont have an...

CVE-2025-55182

CVE-2025-55182 Proof-of-Concept for CVE-2025-55182, a critical unauthenticated RCE in React Server Components. ⚠️ Disclaimer This document is provided strictly for educational, defensive, and authorized security research purposes. Do NOT attempt to exploit systems or applications without explicit...

CVE-2025-55182

CVE-2025-55182 - React Server Components RCE Exploit Python CLI exploit for CVE-2025-55182, a critical RCE vulnerability in React Server Components via react-server-dom-webpack. Based on: ejpir/CVE-2025-55182-poc Quick Start Docker Testing root@kitploit: Unpack src.zip zip -r src.zip src Build an...

electronegativity

Electronegativity ⚠️ We're no longer actively maintaining this project ⚠️ What's Electronegativity? Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron-based applications. It leverages AST and DOM parsing to look for security-relevant configurations, as...

react2shell

React2Shell Vulnerability Checker CVE-2025-55182 Detection Tool for Ubuntu Linux and Windows 10/11 Description This tool detects potential React2Shell vulnerabilities CVE-2025-55182 in React projects by checking: package.json and lock files for vulnerable packages nodemodules directory for affect...

CVE-2022-45472

CVE-2022-45472 XSS basado en DOM Software: CAE Learning Space Enterprise con licencia Intuity Versión de imagen: 267r Nivel de parche: 639 Vulnerabilidad: XSS basado en DOM Descripción El software de gestión CAE Learning Space Enterprise es vulnerable a un ataque de XSS basado en DOM. Un ataque d...

CVE-2026-64638

CVE-2026-64638 // XSS2Shell Análisis técnico y matriz de mitigación defensiva para el vector CVE-2026-64638 XSS2Shell, una inconsistencia crítica en el parsing de la pantalla de autenticación de WordPress Core que permite encadenar un Cross-Site Scripting XSS reflejado pre-autenticación con...

dalfox

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

CVE-2026-83616

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, Document.createProcessingInstructiontarget, data in lib/dom.js accepts an unvalidated target, while...

EUVD-2026-69234

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom versions 0.3.0 through 0.6.0, two independent quadratic paths can cause denial of service. In lib/sax.js, parseElementStartPart...

EUVD-2026-69220

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.0 until 0.9.12, the shared reg builder in lib/grammar.js compiles the anchored QNameexact validator with the multiline flag, so ^ and $ validate only one line instead of the complete...