Loading...
Loading...
Found 4 Skills
XPath Injection is an attack technique used to exploit applications that construct XPath (XML Path Language) queries from user-supplied input to query or navigate XML documents. Automate XPath injection attacks to retrieve documents Advanced XPath Injection Tool A fork of xxxpwn using predictive text Xpath injection exploitation tool Similar to SQL injection, you want to terminate the query...
NoSQL databases provide looser consistency restrictions than traditional SQL databases. By requiring fewer relational constraints and consistency checks, NoSQL databases often offer performance and scaling benefits. Yet these databases are still potentially vulnerable to injection attacks, even if they aren't using the traditional SQL syntax. Automated NoSQL database enumeration and web...
HTTP Request smuggling occurs when multiple 'things' process a request, but differ on how they determine where the request starts/ends. This disagreement can be used to interfere with another user's request/response or to bypass security controls. It normally occurs due to prioritising different HTTP headers (Content-Length vs Transfer-Encoding), differences in handling malformed headers (eg...
IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare. Bruteforcing the phone number of any Google user while rotating IPv6 addresses. Fast web fuzzer written in Go. The class-leading vulnerability scanning, penetration testing, and web app security platform. A special build of curl that can impersonate Chrome & Firefox. In a web context, brute-forcing...