xxe

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

Java web common vulnerabilities and security code which is base on springboot and spring security

Top disclosed reports from HackerOne

🎯 XML External Entity (XXE) Injection Payload List

List DTDs and generate XXE payloads using those local DTDs.

Tool to help exploit XXE vulnerabilities

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

A list of useful payloads for Web Application Security and Pentest/CTF

Security Knowledge Structure(安全知识汇总)

Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)

This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF rules / Secure Configuration settings.

Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.

BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework

A web application that contains several unit tests for the purpose of .NET security

In this repository I'll host my research and methodologies for auditing vulnerabilities

Just a useless set of payload created by me. Saved here for remembrance.

A cheatsheet for exploiting server-side SVG rasterization.

pwnig all the (web)things

收集了java XXE漏洞的demo及修复方式