loxs-optimized

loxs-optimized 项目来自 https://github.com/coffinxp/loxs CSP-Bypass-xss.txt 注意：它主要用于绕过 CSP payload 2024-11-06 将 CSP-Bypass-xss.txt 添加到 xss.txt 2024-11-07 移除干扰信息 仅显示存在漏洞的信息 2024-11-11 解决程序运行到 100% 时不会自动退出的问题 2024-12-12 cat livedomainurl.txt | gf sqli | tee -a sqlisqli.txt bash sqlmap-batch-detection.s...

chusa

chusa: 注射 Chusa - 注射 是一个基于 SQLmap 的开源渗透测试工具，可自动化检测和利用 SQL 注入漏洞并接管数据库服务器的过程。它配备了强大的检测引擎、许多面向终极渗透测试人员的特色功能，以及广泛的开关选项，包括数据库指纹识别、从数据库获取数据、访问底层文件系统，以及通过带外连接在操作系统上执行命令。 截图： CLI: Web-UI-Api: 安装： 您可以通过点击 这里 下载最新的 tarball，或点击 这里 下载最新的 zipball。 更推荐的是，您可以通过克隆 Git 仓库来下载 chusa： git clone --depth 1...

golismero

What's GoLismero? GoLismero is an open source framework for security testing. It's currently geared towards web security, but it can easily be expanded to other kinds of scans. The most interesting features of the framework are: Real platform independence. Tested on Windows, Linux, BSD and OS X. ...

whitewidow

sqlmap sqlmap 是一个开源的渗透测试工具，可以用来自动化的检测，利用SQL注入漏洞，获取数据库服务器的权限。它具有功能强大的检测引擎,针对各种不同类型数据库的渗透测试的功能选项，包括获取数据库中存储的数据，访问操作系统文件甚至可以通过外带数据连接的方式执行操作系统命令。 演示截图 你可以访问 wiki上的 截图 查看各种用法的演示 安装方法 你可以点击 这里 下载最新的 tar 打包的源代码 或者点击 这里下载最新的 zip 打包的源代码. 推荐你从 Git 仓库获取最新的源代码: git clone --depth 1...

AutoSQLi

AutoSQLi，脚本小子黑网站的新方式 功能 保存系统 - 有一个完整的保存系统，即使电脑崩溃也能恢复。 - 科技很酷 搜索引擎搜索 - 从命令行（单个搜索引擎搜索）：是 - 从文件：否 - 从交互式向导：是 WAF检测 - 感谢 Ekultek，WhatWaf 现在有了 JSON 输出功能。 - 所以基本完成 : - 更新：WhatWaf 已完全与 AutoSQLi 兼容。Sqlmap 是下一个重要步骤 SQL注入映射 - 我会看看是否有某种 sqlmap API，因为我这次不想用 execute（: - Sqlmap 很酷 报告生成：是 提供 Rest API：否...

Kousei

Kousei こうせい Autor: nu11secur1ty Años: 2023–2026 Lenguaje: Python con módulos opcionales en Go Propósito: Generar solicitudes Proof-of-Concept de SQLi, automatizar ataques con sqlmap y gestionar módulos de ataque con facilidad. Descripción Kousei こうせい es un framework agresivo para sqlmap que puede...

AMFDSer-ngng

AMFDSer-ngng 一个 Burp Extender 插件，它将会获取反序列化的 AMF 对象，并使用 Xtream 库将其编码为 XML。基于 Khai Tran 的原创工作，致敬 https://blog.netspi.com/ AMFDSer-ngng 还利用了 Kenneth Hill 的 Jmeter 源代码的一部分，用于自定义 AMF 反序列化 https://github.com/steeltomato/jmeter-amf。以及 Xtream 库 http://xstream.codehaus.org/...

sql-injection-poc

SQL Injection PoC – gptcdharmapurico.in 🚨 LEGAL DISCLAIME...

Multimodal-web-attack-Dataset — Updated!

MWAD: A Multimodal Web Attack Dataset for AI-Driven SQL Injection Detection Overview The Multimodal Web Attack Dataset MWAD is a novel labelled cybersecurity dataset developed as part of the author's research in cybersecurity at La Trobe University, Australia. The dataset generation methodology,...

DAST-Platform

🛡️ DAST Platform !Pythonhttps://img.shields.io/badge/Pytho...

Security-Writeups

🔐 Security Writeups Welcome! This repository contains my pers...

CVE-2026-8659

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

CVE-2026-8659 OS Command Injection in Rapid7 InsightConnect SQLmap Plugin

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

CVE-2026-8659 OS Command Injection in Rapid7 InsightConnect SQLmap Plugin

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

EUVD-2026-39152

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

CVE-2026-8659

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

CVE-2026-8659

CVE-2026-8659 describes an OS Command Injection in the Rapid7 InsightConnect SQLmap Plugin on Linux. The issue arises from insufficient input validation in connection configuration, allowing an authenticated attacker to execute arbitrary OS commands via the api_host or api_port parameters. The NV...

PT-2026-52156

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the api host or api port parameters during connection configuration due to insufficient input validation...

CVE-2026-8659: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Rapid7 InsightConnect SQLmap Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the apihost or apiport parameters during connection configuration due to insufficient input validation...

📄 Bloodbank CMS 1.0 SQL Injection

Bloodbank CMS version 1.0 suffers from a remote SQL injection vulnerability. ================================================================================================================================== | Title : bloodbank cms v1.0 sql injection vulnerability | | Author : indoushka | | Teste...