annsmarmalarki

SpringShell

Spring4Shell - Spring Core RCE - CVE-2022-22965

CVE-2022-1388_PoC

F5 BIG-IP RCE exploitation (CVE-2022-1388)

CVE-2022-1388-RCE-checker-and-POC-Exploit

command-injection-payload-list

🎯 Command Injection Payload List

CybRecon

An Automated tool performing Reconnaissance on the target using popular Open Source tools

match-replace-burp

Useful "Match and Replace" burpsuite rules

LinkFinder

A python script that finds endpoints in JavaScript files

filterbypass

Browser's XSS Filter Bypass Cheat Sheet

ssrf-tool

An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.

SSRFmap

Automatic SSRF fuzzer and exploitation tool

Directory-Traversal-Toolbox

A few handy scripts for pulling important files off remote machines using a directory traversal or local file include vulnerability.

Vailyn

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

psychoPATH

psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support, single byte generator, payload export.

dot2moon

Tool that checks for path traversal traces in a given web application url, plus it is capable of multi-threading, set timeout and 5-layers verification.

BWPT

Website path traversal vulnerability scanner.

SimplesApachePathTraversal

Tool check: CVE-2021-41773, CVE-2021-42013, CVE-2020-17519

FDsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

dotdotslash

Search for Directory Traversal Vulnerabilities

CVE-2020-0796-RCE-POC

CVE-2020-0796 Remote Code Execution POC

ESpoofing

A fuzzing tool for email sender spoofing attack. 👻

xsser

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

XSS-Freak

XSS-Freak is an xss scanner fully written in python3 from scratch. it is one of its kind since it crawls the website for all possible links and directories to expand its attack scope. then it searches them for inputs tags and then launches a bunch of xss payloads. if an inputs is not sanitized and vulnerable to xss attacks, the tool will discover it in seconds.

log4jshell-pdf

The purpose of this project is to demonstrate the Log4Shell exploit with Log4J vulnerabilities using PDF as delivery channel

log4j-payload-generator

Log4j jndi injects the Payload generator

CVE-2021-44228-PoC-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

log4j-tools

check-log4j

To determine if a host is vulnerable to log4j CVE‐2021‐44228

look4jar

Looking for JAR files that are vulnerable to Log4j RCE (CVE‐2021‐44228)?