AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

PayloadsAllTheThings

Payloads All The Things A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques! You can also contribute with a 🍻 IRL, or using the sponsor button. An alternative display version is available at PayloadsAllTheThingsWeb. 📖...

dalfox

Looking for the Go v2.x version? Dalfox v3 is a complete rewrite in Rust. The Go codebase is preserved on the v2 branch and continues to receive security backports. See SECURITY.md for the support policy, and the migration guide for what changed in v3. Dalfox is a powerful open-source tool that...

venom

VENOM 1.0.17 - metasploit Shellcode generator/compiller root@kitploit: Version release : v1.0.17 Author : pedro ubuntu r00t-3xp10it Codename: Aconite Aconitum napellus Distros Supported : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2019...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

Kautilya

Kautilya Kautilya는 침투 테스트 중 컴퓨터에 침입하는 데 도움이 될 수 있는 휴먼 인터페이스 장치용 다양한 페이로드를 제공하는 툴킷입니다. By nikhilmitt 페이로드 목록 Windows 수집 정보 수집 해시덤프 및 유출 키로깅 및 유출 스니퍼 WLAN 키 덤프 대상 자격 증명 획득 LSA Secrets 덤프 평문 비밀번호 덤프 SAM 복사 프로세스 메모리 덤프 Windows Vault 자격 증명 덤프 실행 다운로드 및 실행 핫스팟 연결 및 코드 실행 Powershell을 사용한 코드 실행 DNS TXT 쿼...

xssless

xssless python으로 작성된 자동화된 XSS 페이로드 생성기입니다. 사용법 1. Burp proxy로 요청들을 기록합니다. 2. 생성하려는 요청들을 선택한 다음 마우스 오른쪽 버튼을 클릭하고 "Save items"를 선택합니다. 3. xssless를 사용하여 페이로드를 생성합니다: ./xssless.py burpexportfile 4. Pwn! 더 자세한 튜토리얼은 여기에서 확인할 수 있습니다. 기능 가져온 Burp 프록시 요청에서 자동화된 XSS 페이로드 생성 페이로드는 100% 비동기 방식이므로 사용자의 브라우저가...

HackTools

Welcome to HackTools ! Introduction — Preview — Install — Build — Support !NOTE Psst... Loved HackTools? 👀 Check out Penflow - our new security testing companion! Try it at map.penflow.sh 🚀 !NOTE Dear Users, We're excited to announce a major revamp of our app! Due to recent changes and multiple...

Tiny-XSS-Payloads

Tiny-XSS-Payloads A collection of short XSS payloads that can be used in different contexts. The DEMO available here: https://tinyxss.terjanq.me Current Payloads root@kitploit: ... -- root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit: root@kitploit:...

avet

AntiVirus Evasion Tool AVET is not being further developed due to technical development and time constraints. AVET is an AntiVirus Evasion Tool, which was developed for making life easier for pentesters and for experimenting with antivirus evasion techniques, as well as other methods used by...

femida

Femida-xss WIP An automated blind-xss search plugin for Burp Suite. Installation Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - find and select blind-xss.py How to use Settings First of all you need to setup your callback URL in field called "Your url" and press Enter ...

femida

Femida-xss WIP Burp Suite용 자동 블라인드 XSS 검색 플러그인입니다. 설치 Git clone https://github.com/wish-i-was/femida.git Burp - Extender - Add - 찾아서 blind-xss.py 선택 사용 방법 설정 먼저 "Your url" 필드에 콜백 URL을 설정하고 Enter 키를 누르면 config.py 파일에 자동으로 저장됩니다. 설정이 완료되면 Payloads 테이블에 OOB-XSS 벡터를 채워야 확장 프로그램이 나가는 요청에 페이로드를 주입할 수...

Pi-Zero-2W-Bad-USB

Raspberry Pi Zero 2 W BadUSB HID Toolkit Программируемая платформа для атак BadUSB / HID, построенная на Raspberry Pi Zero 2 W. Pi эмулирует составное USB-устройство клавиатуру плюс опциональный доступный только для чтения том массового хранения и выполняет пейлоады в стиле Ducky-Script на хосте,...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

CVE-2020-0796-Scanner

SMBGhostscanner Простой сканер для CVE-2020-0796 - SMBv3. Сканер предназначен только для проверки, уязвим ли сервер. Он не предназначен для исследований или разработки, отсюда и фиксированный payload. Он проверяет диалект SMB 3.1.1 и возможность сжатия через запрос согласования. SMBGhostscanner.e...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

SecLists

О SecLists SecLists — это компаньон тестировщика безопасности. Это коллекция различных типов списков, используемых при оценке безопасности, собранная в одном месте. Типы списков включают имена пользователей, пароли, URL-адреса, шаблоны конфиденциальных данных, полезные нагрузки для фаззинга,...

Neo

Фреймворк Neo C2 Модульный фреймворк пост-эксплуатации с архитектурой «сервер-клиент», созданный для совместного управления агентами в операциях Red Team и тестировании безопасности. Обеспечивает гибкость, позволяя операторам добавлять собственные модули расширения. Установка • Агенты и Stagers •...

payloads

페이로드 모든 페이로드를 Git으로! 웹 공격 페이로드 모음입니다. 풀 리퀘스트는 언제나 환영합니다! 사용법 외부 페이로드를 다운로드하고 압축된 페이로드 파일을 압축 해제하려면 ./get.sh를 실행하세요. 페이로드 출처 fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists - https://github.com/danielmiessler/SecLists xsuperbug - https://github.com/xsuperbug/payloads NickSanzotta -...

payloads

payloads Git All the Payloads! A collection of web attack payloads. Pull requests are welcome! Usage run ./get.sh to download external payloads and unzip any payload files that are compressed. Payload Credits fuzzdb - https://github.com/fuzzdb-project/fuzzdb SecLists -...