Bo0oM

fuzz.txt

Potentially dangerous files

WAF-bypass-Cheat-Sheet

Another way to bypass WAF Cheat Sheet (draft)

PHP_imap_open_exploit

Bypassing disabled exec functions in PHP (c) CRLF

ParamPamPam

CVE-2017-5124

Chrome < 62 uxss exploit (CVE-2017-5124)

Safiler

Safari local file reader

services-names-wordlist

services-names-wordlist

CVE-2017-7089

Webkit uxss exploit (CVE-2017-7089)

server-status-monitor

Apache server-status link parser

Safari2000day

Bo0oM

browsersec

Automatically exported from code.google.com/p/browsersec

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

uxss-db

🔪Browser vulnerabilities DB :skull_and_crossbones:

-

-

p0f-mtu-script

ＷＩＴＣＨ？(VPN detector) source code

dirsearch

Web path scanner

bitnami-docker-laravel

Bitnami Laravel Docker Compose development environment

bo0om.github.io

defcon-russia.github.io

DEFCON-RUSSIA WEB

docker-CVE-2021-3156

A docker environment to research CVE-2021-3156

pas

A modified version of the well-known webshell - P.A.S. by Profexer. Tries to solve the problem of detecting some requests and responses by various WAF/IDS.

PyGithub

Typed interactions with the GitHub API v3

WTFPL

DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE