Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.

Java web common vulnerabilities and security code which is base on springboot and spring security

Top disclosed reports from HackerOne

🎯 XML External Entity (XXE) Injection Payload List

A list of useful payloads for Web Application Security and Pentest/CTF

Security Knowledge Structure(安全知识汇总)

Tool to help exploit XXE vulnerabilities

Collection of Twitter Bug Bounty Tips and Tricks

Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework

A web application that contains several unit tests for the purpose of .NET security

In this repository I'll host my research and methodologies for auditing vulnerabilities

pwnig all the (web)things

XXE injection (file disclosure) exploit for Apache OFBiz < 16.11.04

Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.

Just a useless set of payload created by me. Saved here for remembrance.

🐶 A curated list of Web Security materials and resources.

This repository contains all my notes. Feel free to use them, share them or modify them.

This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF rules / Secure Configuration settings.

收集了java XXE漏洞的demo及修复方式

A service which is vulnerable to XML External Entity (XXE) attacks.

Python XXE 漏洞复现 flask作为后台

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

一个JAVA agent来防止XXE、s2-032等攻击

Quick tests to evaluate the safety of various .NET XML Parsers with respect to XXE injection

Enumerate and exfiltrate files via out of band XXE, for situations where resolved entity is not displayed in the response, and directory listing is not available.

Oracle CTF Web XML Entity Exploit

A web challenge that was available during SigSegV2 CTF (2019)

XML XXE gems