Bo0oM / Safiler
Safari local file reader
Stars: ✭ 118
Programming Languages
python
139335 projects - #7 most used programming language
Projects that are alternatives of or similar to Safiler
Ansvif
A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.
Stars: ✭ 107 (-9.32%)
Mutual labels: exploit, vulnerability
Labs
Vulnerability Labs for security analysis
Stars: ✭ 1,002 (+749.15%)
Mutual labels: exploit, vulnerability
Herpaderping
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.
Stars: ✭ 614 (+420.34%)
Mutual labels: exploit, vulnerability
Ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Stars: ✭ 4,808 (+3974.58%)
Mutual labels: exploit, vulnerability
Thoron
Thoron Framework is a Linux post-exploitation framework that exploits Linux TCP vulnerability to provide a shell-like connection. Thoron Framework has the ability to create simple payloads to provide Linux TCP attack.
Stars: ✭ 87 (-26.27%)
Mutual labels: exploit, vulnerability
Cve 2017 0065
Exploiting Edge's read:// urlhandler
Stars: ✭ 15 (-87.29%)
Mutual labels: exploit, vulnerability
Pwn2own2020
Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities
Stars: ✭ 314 (+166.1%)
Mutual labels: exploit, safari
Hacker ezines
A collection of electronic hacker magazines carefully curated over the years from multiple sources
Stars: ✭ 72 (-38.98%)
Mutual labels: exploit, vulnerability
Sap exploit
Here you can get full exploit for SAP NetWeaver AS JAVA
Stars: ✭ 60 (-49.15%)
Mutual labels: exploit, vulnerability
A Red Teamer Diaries
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Stars: ✭ 382 (+223.73%)
Mutual labels: exploit, vulnerability
Iblessing
iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.
Stars: ✭ 326 (+176.27%)
Mutual labels: exploit, vulnerability
V3n0m Scanner
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
Stars: ✭ 847 (+617.8%)
Mutual labels: exploit, vulnerability
Shiro exploit
Apache Shiro 反序列化漏洞检测与利用工具
Stars: ✭ 252 (+113.56%)
Mutual labels: exploit, vulnerability
Vbscan
OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
Stars: ✭ 295 (+150%)
Mutual labels: exploit, vulnerability
Slowloris
Asynchronous Python implementation of SlowLoris DoS attack
Stars: ✭ 51 (-56.78%)
Mutual labels: exploit, vulnerability
Reverse Shell
Reverse Shell as a Service
Stars: ✭ 1,281 (+985.59%)
Mutual labels: exploit, vulnerability
Info
https://lab.wallarm.com/hunting-the-files-34caa0c1496 https://xakep.ru/2017/07/06/safari-localfile-read/
How to start
Clone files
$ git clone https://github.com/Bo0oM/Safiler.git
$ cd Safiler
Run server
$ [sudo] pip install -r requirements.txt
$ python server.py
Open PoC
Open PoC.xhtm or PoC.webarchive in Safari.
Copy on a USB flash drive and carry it with you :)
Demo
Exploit PoC: https://bo0om.ru/safari_poc/
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].