xxe

There are 6 repositories under xxe topic.

reddelexc / hackerone-reports
Top disclosed reports from HackerOne
writeups hackerone bugbounty reports xss xxe sql-injection csrf idor rce ssrf security
Language:Python 3279
JoyChou93 / java-sec-code
Java web common vulnerabilities and security code which is base on springboot and spring security
java code security xxe rce deserialize tomcat sqli ssrf rmi cors jsonp web spel benchmark
Language:Java 2279
payloadbox / xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
bug-bounty bugbounty cyber-security cybersecurity hacking information-security infosec payload payloads web-application-security websecurity websecurity-reference xml xml-entity xxe xxe-example xxe-injection xxe-payload xxe-payload-list xxe-payloads
1028
GoSecure / dtd-finder
List DTDs and generate XXE payloads using those local DTDs.
dtd hacktoberfest security xxe
Language:Kotlin 584
xxexploiter
luisfontes19 / xxexploiter
Tool to help exploit XXE vulnerabilities
xxe xee xml exploit exploitation external entities ssrf file read expect command exection oob dtd cdata
Language:TypeScript 525
Li4n0 / revsuit
RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.
pentest-tool ssrf xxe rce reverse-connection bug-bounty dnslog oob out-of-band
Language:Go 490
whitel1st / docem
A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
bugbounty oxml xss xss-injection xxe xxe-injection
Language:Python 477
chennqqi / godnslog
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
dnslog xss ssrf rce xxe rfi webscan vulnerability
Language:Go 469
zer0yu / Berserker
A list of useful payloads for Web Application Security and Pentest/CTF
pentest sqli xss xxe scanner fuzzing web-application intruder ctf
Language:Python 282
JoyChou93 / sks
Security Knowledge Structure(安全知识汇总)
security php java python waf xxe nginx-lua deserialize webshell
239
HLOverflow / XXE-study
This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF rules / Secure Configuration settings.
external-entities java-xxe-demo php-xxe-demo python-xxe-demo xml-entity xml-entity-expansion xxe xxe-example xxe-injection xxe-labs xxe-study
Language:PHP 94
k8gege / ZimbraExploit
Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
0day cve-2019-9621 exploit getshell k8cscan poc rce ssrf upload xxe zimbra
Language:Ruby 74
kljunowsky / XXElixir
This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.
bug-bounty-hunters bug-bounty-tools bugbounty penetration security file-upload penetration-testing penetration-testing-tools xxe owasp xxe-attack xxe-injection file-upload-vulnerability exploit web hack
Language:Python 62
ztgrace / mole
Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.
appsec security-tools penetration-testing infosec python burp-extensions xss xxe oob
Language:Python 57
cokeBeer / go-sec-code
Go-sec-code is a project for learning Go vulnerability code.
go sqli ssrf xss xxe security cors jsonp ssti
Language:Go 33
deanf1 / dotnet-security-unit-tests
A web application that contains several unit tests for the purpose of .NET security
security dotnet xxe-injection nhibernate injection csharp microsoft owasp xpath xquery xxe
Language:C# 30
OlivierLaflamme / Auditing-Vulnerabilities
In this repository I'll host my research and methodologies for auditing vulnerabilities
auditing-vulnerabilities waf csrf xxe http smuggling ssrf crlf
Language:PHP 29
yuriisanin / svg2raster-cheatsheet
A cheatsheet for exploiting server-side SVG rasterization.
dos rce ssrf svg svg2pdf svg2png xxe exploit svg-files
27
ptonewreckin / BlindRef
BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework
python blind-xxe xxe
Language:Python 26
kmille / pentest-wiki
pwnig all the (web)things
web php sql-injection code-review xss template-injection file-uplaod file-inclusion reverse-shell ld-preload xxe
Language:PHP 19
keven1z / XXEDemo
收集了java XXE漏洞的demo及修复方式
xxe
Language:Java 16
jamieparfet / Apache-OFBiz-XXE
XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04
apache cve-2018-8033 exploit ofbiz xxe
Language:Python 15
AhmedAyman1196 / AymanSecNotes
This repository contains all my notes. Feel free to use them, share them or modify them.
python pentest payload bypass web application hacking xss vulnerability bounty methodo privilege-escalation penetration-testing cheatsheet security intruder enumeration sql sqlinjection xxe
8
omurugur / XXE_Payload_List
XML External Entity Vulnerability Payload List
attack entity exploitation identifier impacts injection parser tainted-data uri vulnerability vulnerability-detection vulnerability-scanners xml xml-document xml-processor xxe
8
samuel-knutson / dotnet-xxe-learning-tests
Quick tests to evaluate the safety of various .NET XML Parsers with respect to XXE injection
csharp dotnet dotnet-core security xml xxe xxe-injection
Language:C# 8
hannoch / python-xxe
Python XXE 漏洞复现 flask作为后台
python-xxe xxe-injection xxe-payloads xxe python flask flask-application
Language:CSS 7
FOGSEC / awesome-web-security
🐶 A curated list of Web Security materials and resources.
web-application-security web-application xxe sql shell web-app xss csv orm ftp css-animations ssrf aws header-injection command-injection sub-domain-enumeration recon modsecurity
6
FrancescoDiSalesGithub / XXE-gen
XXE vulnerability creator
xxe xxe-injection xxe-payloads pentesting pentest-tool python-hacking python-hacking-tools python3
Language:Python 6
oppsec / arbimz
🔥 Arbimz is a python tool created to exploit the vulnerability on Zimbra assigned as CVE-2019-9670.
python3 zimbra 2019 cve exploit offsec pentest poc redteam rce ssrf xxe cve-2019-9670 python
Language:Python 5
ASTTeam / XXE
《Web安全教程之XXE漏洞》XML External Entity Injection.
0e0w astteam getshell xxe
4
no1se2 / WebSec-Toolkit-By-no1se
A collection of security tools for pentersion testing
sqlinjection xss xss-attacks xss-detection xss-exploitation xss-vulnerability xxe xxe-attack xxe-injection xxe-payloads
Language:Python 4
BLACK-BUG-HKRS / XAT
XXE Attack Tool
xat xxe xxe-attack bug-bounty-tools
Language:Go 3
holmes-py / reports-summary
A sensible no bullshit repo of summaries of reports on hackerone, bugcrowd and alike, that makes straight up sense and make it easy to repeat and automate. This is supposed to serve as my personal reference, but should be a good public index reference for like minded.
bugbounty bugbounty-writeups bugbountytips csrf cybersecurity dos hackerone hackerone-reports hacking hacktoberfest idor rce reports security sql-injection ssrf writeups xss xxe
3
M3l0nPan / wordpress-cve-2021-29447
Exploit WordPress Media Library XML External Entity Injection (XXE) to exfiltrate files.
cve-2021-29447 exploit python wordpress xxe xxe-injection
Language:Python 3
mprechtl / information-leakage
A service which is vulnerable to XML External Entity (XXE) attacks.
information-leakage javaee resteasy server-status xxe xxe-example
Language:Java 3
TheWation / XXESandbox
The PHP sandbox environment is a Docker-based tool for testing XML processing code, with XXE vulnerabilities demonstrated and security considerations explained.
xxe xxe-example xxe-injection
Language:PHP 3

xxe

reddelexc / hackerone-reports

JoyChou93 / java-sec-code

payloadbox / xxe-injection-payload-list

GoSecure / dtd-finder

luisfontes19 / xxexploiter

Li4n0 / revsuit

whitel1st / docem

chennqqi / godnslog

zer0yu / Berserker

JoyChou93 / sks

HLOverflow / XXE-study

k8gege / ZimbraExploit

kljunowsky / XXElixir

ztgrace / mole

cokeBeer / go-sec-code

deanf1 / dotnet-security-unit-tests

OlivierLaflamme / Auditing-Vulnerabilities

yuriisanin / svg2raster-cheatsheet

ptonewreckin / BlindRef

kmille / pentest-wiki

keven1z / XXEDemo

jamieparfet / Apache-OFBiz-XXE

AhmedAyman1196 / AymanSecNotes

omurugur / XXE_Payload_List

samuel-knutson / dotnet-xxe-learning-tests

hannoch / python-xxe

FOGSEC / awesome-web-security

FrancescoDiSalesGithub / XXE-gen

oppsec / arbimz

ASTTeam / XXE

no1se2 / WebSec-Toolkit-By-no1se

BLACK-BUG-HKRS / XAT

holmes-py / reports-summary

M3l0nPan / wordpress-cve-2021-29447

mprechtl / information-leakage

TheWation / XXESandbox