#1Tools for testing, exploiting, and securing web applications and APIs.
Kitploit recommended

CVE-2022-30190 Follina POC
Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

Injects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.

Damn Vulnerable C# Application (API)

漏洞POC、EXP合集,持续更新。Apache Druid-任意文件读取(CVE-2021-36749)、ConfluenceRCE(CVE-2021-26084)、ZeroShell防火墙RCE(CVE-2019-12725)、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStud…

WEBFANG, is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a…

CVE-2024-4367 & CVE-2024-34342 Proof of Concept

Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

⚡️ Multiple target ZAP Scanning

Unauthenticated remote code execution exploit for GitLab versions < 13.10.3, leveraging ExifTool DjVu annotation parsing to execute arbitrary…

NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities

NetSTRIK is a powerful DDoS (Distributed Denial of Service) attack tool that simulates heavy traffic to test the robustness and security of servers,…

Documents and identifies 2,953 Chrome extensions silently probed by LinkedIn, providing tools to fetch extension names and analyze browser…