746 Open source projects that are alternatives of or similar to Tiny Xss Payloads

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

CTF Training 经典赛题复现环境

扫描器是来自GitHub平台的开源扫描器的集合，包括子域枚举、数据库漏洞扫描器、弱密码或信息泄漏扫描器、端口扫描器、指纹扫描器以及其他大规模扫描仪、模块扫描器等。对于其他著名的扫描工具，如：awvs、nmap，w3af将不包含在集合范围内。

Solutions and write-ups from security-based competitions also known as Capture The Flag competition

Reinforced Mitigation Security Filter

Getting started with java code auditing 代码审计入门的小项目

CTF windows pwntools

Tool for automating customized attacks against web applications. Fully made in C language with pthreads, it has fast performance.

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Perfect Blue's CTF Writeups

Dump exposed HTTP .git fast

Linux kernel development & exploitation lab.

Subdomain takeover vulnerability checker

HITB SECCONF EDU CTF 2021. Developed with ❤️ by Hackerdom team and HITB.

Build Content-Security-Policy headers from a JSON file (or build them programmatically)

ImageStrike是一款用于CTF中图片隐写的综合利用工具

💖CTF pwn framework.

My personal bug bounty toolkit.

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Subdomain discovery using the power of 'The Rapid7 Project Sonar datasets'

The iCTF Framework, presented by Shellphish!

Useful tools for CTF competitions

Writing custom backdoor payloads with C# - Defcon 27 Workshop

Cryptography & CTF Writeups

Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

Some wrrite-ups

Small tool to package javascript into a valid image file.

Write-ups for FireEye's FLARE-On challenges

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

Modified Nuclei Templates Version to FUZZ Host Header

CaptfEncoder是一款跨平台网络安全工具套件，提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具，并聚合各类在线工具。

My CTF writeups

Infosec Wordlists

Safe replacement for the v-html directive

List of advanced XSS payloads

CTF (Capture The Flag Writeups and Tools)

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

libc database (file in packages, hash, package files, symbols). Raw binary libc available on https://github.com/BestPig/libc-bin)

Course materials for Modern Binary Exploitation by RPISEC

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

Image Payload Creating/Injecting tools

lamp-cloud 基于Jdk11 + SpringCloud + SpringBoot的微服务快速开发平台，其中的可配置的SaaS功能尤其闪耀， 具备RBAC功能、网关统一鉴权、Xss防跨站攻击、自动代码生成、多种存储系统、分布式事务、分布式定时任务等多个模块，支持多业务系统并行开发， 支持多服务并行开发，可以作为后端服务的开发脚手架。代码简洁，注释齐全，架构清晰，非常适合学习和企业作为基础框架使用。

anewer appends lines from stdin to a file if they don't already exist in the file. This is a rust version of https://github.com/tomnomnom/anew

DEFCON 2018 Qualification writeups

CTF平台 动态flag docker部署管理 管理端由flask提供API VUE+element构建

AWD攻防赛webshell批量利用框架

🔑 Hash type identifier (CLI & lib)

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

This document proposes a way of standardising the structure, language, and grammar used in security policies.

A docker repository for deploying pwnable challenges in CTF

Web path scanner

Capture the flag challenges

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

Cheat Sheets for programming languages and tools

Tasks from CTFZone 2017 quals

Platform to host Capture the Flag competitions

Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems

Pentest Lab on OpenStack with Heat, Chef provisioning and Docker

One-click installer for Frida and Burp certs for SSL Pinning bypass