#安全#Top disclosed reports from HackerOne
🎯 XML External Entity (XXE) Injection Payload List
A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.
翻译 - RevSuit 是一个灵活而强大的反向连接平台，专为在渗透中接收来自目标主机的连接而设计。
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
A list of useful payloads for Web Application Security and Pentest/CTF
翻译 - Web应用程序安全性和Pentest / CTF有用负载的列表
Security Knowledge Structure(安全知识汇总)
This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF ru...
This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.
Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.
Go-sec-code is a project for learning Go vulnerability code.
BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework
