Top disclosed reports from HackerOne

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

A list of useful payloads for Web Application Security and Pentest/CTF

This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.

Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.

BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework

XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04

The Ultimate File Upload Bypass Generator

XXE vulnerability creator

Exploit WordPress Media Library XML External Entity Injection (XXE) to exfiltrate files.

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

WAFManis is a Protocol-Level WAF Evasion Fuzzing Tool that automates the discovery of evasion vulnerabilities in Web Application Firewalls (WAFs) by fuzzing HTTP requests to identify potential bypass techniques.

A collection of security tools for pentersion testing

A collection of notes and scripts on web application vulnerabilities, created while learning ethical hacking and practicing on legal labs like PortSwigger. This is part of my personal journey into cybersecurity — built for learners, by a learner.

xxe smb/ftp server 适用于xxe的smb/ftp服务 docker一键启动 安全快捷

A comprehensive Python package for XML External Entity (XXE) security testing and analysis. This package provides tools for security researchers and ethical hackers to identify and analyze XXE vulnerabilities in XML processing systems.

Proof of Concept for CVE-2021-29447 written in Python

A web crawler and vulnerability scanner tool developed by Rohit Ajariwal