6017 matches found
pphack
pphack Advanced Client-Side Prototype Pollution Scanner Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Install 📡 Using Go root@kitploit:...
ppfuzz
ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...
xtrace-sdk
The encrypted vector database. Your data never leaves your machine in plaintext. Documentation | X | LinkedIn Manage your AI memory → mem.xtrace.ai What is XTrace? Every vector database on the market requires you to hand your data to a third party in plaintext. XTrace doesn't. Your documents and...
JQueryingU
JQueryingU NOTES: Base client side detection code created by Christian Ludwig https://jsfiddle.net/ChristianL/AVyND/, and used by APT 29 in 2016. APT 29 modified the popup to be a POST request and used it during a conference shadowing campaign to profile user systems and who clicked before sendin...
jspanda
JSPanda JSpanda is client-side prototype pollution vulnerability scanner. It has two key features, scanning vulnerability the supplied URLs and analyzing the JavaScript libraries' source code. However, JSpanda cannot detect advanced prototype pollution vulnerabilities. How JSPanda works? Uses...
CVE-2023-23397-PoW
CVE-2023-23397-PoW Prueba de concepto de CVE-2023-23397 para la aplicación cliente vulnerable de Microsoft Outlook. Solo con fines educativos y de investigación. Vista previa de CVE-2023-23397 Este CVE tenía como objetivo recuperar el hash NetNTLM del usuario que ha iniciado sesión desde la versi...
CVE-2022-31297
CVE-2022-31297 Haraj Script 3.7 - XSS Reflejado Título del Exploit: Haraj Script 3.7 - XSS Reflejado Fecha: 2022-06-13 CVE: CVE-2022-31297 Autor del Exploit: Abdulaziz Saad @b4zb0z Página del Proveedor: https://angtech.org/ Enlace del Software: https://angtech.org/product/view/3 Versión: 3.7...
sharemylogin
ShareMyLogin Open Source This is the public source code for ShareMyLogin.com. What is ShareMyLogin? ShareMyLogin is a secure tool for sharing sensitive information like passwords, API keys, or config secrets. The Problem Sending a password over Slack, Email, or WhatsApp creates a permanent record...
Limbas-4.3.36.1319-is-vulnerable-to-Cross-Site-Scripting-XSS-
Limbas-4.3.36.1319-es-vulnerable-a-Cross-Site-Scripting-XSS DESCRIPCIÓN Limbas 4.3.36.1319 es vulnerable a Cross Site Scripting XSS LIMBAS http://www.limbas.org/ - 4.3.36.1319 PRUEBA DE CONCEPTO UPDATE/up20.php la página reflejó el código XSS EJEMPLO DE PAYLOAD 1'"&% DETALLES XSS Cross-site...
ServiceNow - Cross-site Scripting
A XSS vulnerability was identified in the ServiceNow UI page assessmentredirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be used to conduct various client-side attacks,...
vulnrepo
VULNRΞPO - Generador y Repositorio de Informes de Vulnerabilidades Un gestor de informes de vulnerabilidades del lado del cliente, centrado en la privacidad para profesionales de la seguridad. Todos los datos se cifran y almacenan localmente en su navegador; por defecto, no se envía nada a ningún...
plution
plution Escáner de contaminación de prototipos usando Chrome headless Qué es esto Plution es una forma conveniente de escanear a gran escala páginas que son vulnerables a la contaminación de prototipos del lado del cliente mediante un payload en la URL. En la configuración predeterminada, usará u...
plution
plution Prototype pollution scanner using headless chrome What this is Plution is a convenient way to scan at scale for pages that are vulnerable to client side prototype pollution via a URL payload. In the default configuration, it will use a hardcoded payload that can detect 11 of the cases...
CloakBin
CloakBin Zero-Knowledge Encrypted Pastebin Your data is encrypted before it leaves your browser. We can't read it. No one can. Live Demo • Report Bug • Request Feature Why Zero-Knowledge? Traditional pastebins store your data in plaintext. Server admins, hackers, or anyone with database access ca...
PrettyTrusts
PrettyTrusts Try it out at:http://peewpw.github.io/PrettyTrusts Visualizes the output of PowerView's Get-DomainTrustMapping | Export-CSV -NoTypeInformation trusts.csv. Hand it the csv file and get a pretty diagram to play with! Should work with older and new PowerView outputs. Everything is...
oopso
oopso An easy-to-use client-side OSINT query builder for discovering exposed file managers across search engines. Version: 1.0 Features Multi-engine support: Automatically translates fingerprints into native query syntax for Shodan, FOFA, ZoomEye, and Censys Extensive coverage: Built-in signature...
DET
DET extensible Data Exfiltration Toolkit DET is provided AS IS, is a proof of concept to perform Data Exfiltration using either single or multiple channels at the same time. This is a Proof of Concept aimed at identifying possible DLP failures. This should never be used to exfiltrate sensitive/li...
html-poc
Proof of concept code for client-side vulnerabilities Basic HTML proof of concepts for issues such as: Clickjacking insecure CORS settings CSRF Tabnapping XSSI postMessage issues Most of these are pretty basic, but having them all in one place avoids writing the same things over and over again. T...
CVE-2024-57175
CVE-2024-57175: Cross-Site Scripting XSS almacenado en PHPGURUKUL Online Birth Certificate System v1.0 Descripción Se identificó una vulnerabilidad de Cross-Site Scripting XSS almacenado en PHPGURUKUL Online Birth Certificate System v1.0 en la página /user/certificate-form.php. Esta vulnerabilida...