kleiton0x00 Goto Github PK

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

cors-one-liner

A one liner Bash command which finds CORS in every possible endpoint.

crlf-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.

http-smuggling-calculator

Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.

kleiton0x00

kleiton0x00.github.io

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

proxy-dll-loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

redditc2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

remoteshellcodeexec

Execute shellcode from a remote-hosted bin file using Winhttp.

shelltropy

A technique of hiding malicious shellcode via Shannon encoding.

todesstern

A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities

xsscope

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.