kleiton0x00

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

Proxy-DLL-Loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

XSScope

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

RedditC2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

Shelltropy

A technique of hiding malicious shellcode via Shannon encoding.

RemoteShellcodeExec

Execute shellcode from a remote-hosted bin file using Winhttp.

CORS-one-liner

A one liner Bash command which finds CORS in every possible endpoint.

HTTP-Smuggling-Calculator

Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.

CRLF-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.

Todesstern

A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities

kleiton0x00.github.io

kleiton0x00