Projects sharing features with Xxexploiter

BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It functions as a platform for security professionals to evaluate client-side defenses by injecting persistent scripts into web browsers, establishing a bidirectional communication channel for remote command execution and data exfiltration. The framework distinguishes itself through its ability to use compromised browser sessions as proxies to conduct internal network reconnaissance, effectively bypassing perimeter security controls. It utilizes an event-driven control interface and

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

List DTDs and generate XXE payloads using those local DTDs.

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

Redis(<=5.0.5) RCE

A DNS rebinding attack framework.

Exploit for CVE-2019-11043

Ghauri is an automated SQL injection scanner and exploitation tool designed to detect and extract data from vulnerable databases. It functions as a database exfiltration framework that identifies security flaws and retrieves system banners, hostnames, and database schemas. The tool identifies boolean, error, time-based, and stacked query vulnerabilities across multiple input vectors, including HTTP headers, cookies, JSON, SOAP, and XML. It provides capabilities for automated database exfiltration and the processing of bulk target lists to identify flaws across multiple environments. The syst

Redis 4.x/5.x RCE

Automatic SSRF fuzzer and exploitation tool

An XSS exploitation command-line interface and payload generator.

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Nosql-Exploitation-Framework