xss-payload-list
h3x0v3rl0rd/xss-payload-listCurated collection of XSS payload vectors for web application security testing, covering various contexts and bypass techniques.
curated-resourceseducationvulnerability-analysis+2
h3x0v3rl0rd/xss-payload-listCurated collection of XSS payload vectors for web application security testing, covering various contexts and bypass techniques.
sinkaroid/shigureshCVE-2004-1769 cPanel Resetpass Remote Command Execution
redsplit/shigureshCVE-2004-1769 // Mass cPanel Reset password
c0mmand3ropsec/cve-2017-10271Unauthenticated remote code execution exploit for Oracle WebLogic CVE-2017-10271. Provides XML payload and endpoint list for penetration testing of…
ssl/scan4log4jPython script that sends CVE-2021-44228 log4j payload requests to url list
kaandemir993/acrstealer-custom-protocol-credential-theft-payload-extraction-analysisReverse engineering analysis of AcrStealer, a sophisticated info-stealer that uses custom protocols, browser credential theft, and payload…
kaandemir993/dropper-gcleaner-c2-infrastructure-kernel-driver-powershell-conhost-payload-analysisReverse engineering analysis of Dropper GCleaner, a malware that uses a resilient C2 infrastructure, kernel driver loading, PowerShell/Conhost…
zapstiko/bug-bountyHere Are Some Bug Bounty Resource From Twitter
securebinary/firebaseexploiterCLI tool to scan for and exploit insecure Firebase databases, supporting mass vulnerability scanning, custom JSON payload injection, and URI path…
joelindra/cve-2017-9841Tool designed to scan a list of websites for a known vulnerability in the PHPUnit framework, specifically the CVE-2017-9841 vulnerability.
r3dxpl0it/secrepSecRep Is a Repository That Contain Useful Intrusion, Penetration and Hacking Archive Including Tools List, Cheetsheet and Payloads
virtualalllocex/payload-download-cradlesThis are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context…
owasp/owasp-huntingCurated collection of payloads for ethical security testing and bug bounty hunting, covering common web vulnerabilities and attack vectors.
ghosttroops/topTOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
blasty/cve-2021-3156Exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo, enabling local privilege escalation. Includes target list and…
portswigger/xss-cheatsheet-dataCommunity-contributed JSON dataset of XSS payload vectors powering the PortSwigger XSS cheat sheet, with browser support and interaction metadata.
edr4/xss-bypass-filtersCurated XSS payload collection and filter-bypass cheat sheet: WAF-specific evasion, JS/HTML injection vectors, encoding tricks, DOMPurify and…