nowak0x01 Goto Github PK

__v1__

Portswigger Poc - Reflected XSS protected by very strict CSP, with dangling markup attack - Account Takeover [ CSRF Token Exifiltrate + Change Email Auto Submit ]

code-review

drupalwned

Drupalwned is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in Drupal CMS.

java-insecure-deserialization

joomsploit

JoomSploit is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in Joomla CMS.

jwt-editor

A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decryption of JWE and automation of several well-known attacks against applications that consume JWT.

knowsmore

KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).

lastwhisper

lastwhisper will help you when no more hope, the idea behind lastwhisper is simple but it's a powerful tool

ohyeahimjusttypingnothingwithnothingmytrashphptooltoverifydisable_functionsphphaveaniceday

phar-polyglot-files

php-insecure-deserialization

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

portswigger-cachepoisoning-unintended-sollution

Lab: Cache key injection [Expert] - Unintended Sollution Poc

portswigger-lab-internal_cache_poisoning-unintended-solution

Portswigger Internal Cache Poisoning [Expert] Unintended Solution - https://portswigger.net/web-security/web-cache-poisoning/exploiting-implementation-flaws/lab-web-cache-poisoning-internal

prestaxsrf

PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in PrestaShop E-Commerce

slackarch

script that install and compile all tools needed by the https://github.com/KingOfBugbounty/KingOfBugBountyTips/ repository for arch-based system's and their API's

wpxstrike

WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in WordPress