1826 Open source projects that are alternatives of or similar to Command Injection Payload List

hack tools

XSS in pastebin.com and reddit.com via unsanitized markdown output

Command line tool for testing CRLF injection on a list of domains.

Go Web Application Penetration Test

Subdomain takeover vulnerability checker

🎯 XML External Entity (XXE) Injection Payload List

Frosted: Free POSIX OS for tiny embedded devices

hacker, ready for more of our story ! 🚀

Tutorials and Things to Do while Hunting Vulnerability.

📗 How to write cross-platform Node.js code

An open-source Unix operating system

SixArm.com » Unix » shell scripts for command line programs in sh, bash, etc.

This repository contains payload to test NoSQL Injections

Web application vulnerability scanner

Operating system for x86_64 based around a "keep it simple and make it work" philosophy.

Non-blocking external commands in Go with and streaming output and concurrent-safe access

ucore os lab guide

A handy command line interface for gulp

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

ES File Explorer Open Port Vulnerability - CVE-2019-6447

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Powerful Python pipelines for your shell

A Unix, Windows, Raspberry Pi Object Speed Camera using python, opencv, video streaming, motion tracking. Includes a Standalone Web Server Interface, Image Search using opencv template match and a whiptail Admin Menu Interface Includes picam and webcam Plugins for motion track security camera configuration including rclone sync script. watch-app allows remotely controller camera configuration from a remote storage service name. Uses sqlite3 and gnuplot for reporting. Recently added openalpr license plate reader support.

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

Proofs-of-concept

Reflective PE packer.

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Mac app that shows all open files, directories, sockets, pipes and devices in use by all running processes. Nice GUI for lsof.

Take screenshot selection, upload to imgur. + more cool things

Top disclosed reports from HackerOne

Apache Solr Injection Research

A big list of Android Hackerone disclosed reports and other resources.

💡PHPer 必知必会的 Linux 命令

An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques

The s6 supervision suite.

OPCDE Cybersecurity Conference Materials

A Gatsby email *application*

A desktop Laravel admin panel app

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.

🔀 Cross platform setting of environment scripts

Image Payload Creating/Injecting tools

This repo is about @harshbothra_ 365 days of learning Tweet & Mindmap collection

A Commander for modern Go CLI interactions

Elvish = Expressive Programming Language + Versatile Interactive Shell

An OCaml library for HTTP clients and servers using Lwt or Async

A collection of Bash scripts for creating safe and useful command line programs.

Progressive Web App Manifest Generator for Webpack, with auto icon resizing and fingerprinting support.

Powerfull XSS Scanning and Parameter analysis tool&gem

An unix-like toy kernel

Handbook of information collection for penetration testing and src

Replacement of QtSingleApplication for Qt5 with support for instance communication.

Antivirus evasion project

A list of operating systems and stuff

// Source : ISO

A Powerful Subdomain Takeover Tool

Occlum is a memory-safe, multi-process library OS for Intel SGX

HERCULES is a special payload generator that can bypass antivirus softwares.

morphHTA - Morphing Cobalt Strike's evil.HTA