OWASP PTK - application security browser extension.

security jwt xss owasp xss-exploitation sqlinjection iast sast dast sql-injection-attacks jwt-security commandinjection command-injection-attack

• Updated Nov 11, 2026
• JavaScript

A collection of web pages, vulnerable to command injection flaws.

training open-source bug-bounty pentesting testbed commandinjection

• Updated Nov 5, 2026
• PHP

Welcome SecToolkit repository! This is a comprehensive collection of cybersecurity and bug bounty hunting topics. Here, you'll find a variety of resources, notes, and practical projects aimed at enhancing knowledge and skills in identifying and mitigating security vulnerabilities.

cryptography netcat python3 enumeration nmap penetration-testing fuzzing xss-vulnerability bugbounty sqlinjection owasp-top-10 reconnaissance idor commandinjection cybersecurity-education bugbounty-writeups requestsmuggling bugbountyroadmap

• Updated Jun 3, 2025

PoC exploits CVE-2025-24893 , a remote code execution (RCE) vulnerability in XWiki caused by improper sandboxing in Groovy macros rendered asynchronously. It allows arbitrary command execution through injection into RSS-based SolrSearch endpoints.

proof-of-concept poc rce xwiki commandinjection cve-2025-24893 groovyinjection asyncrendering webappexploit

• Updated Sep 2, 2025
• Python

A web crawler and vulnerability scanner tool developed by Rohit Ajariwal

ldap sql-injection csrf webcrawler clickjacking vulnerability-scanners ssrf xxe csrf-attacks xxe-injection xxe-payloads lfi-exploitation sql-injection-exploitation lfi-vulnerability commandinjection ssrf-payload ssrf-scanner crosssitescripting lfi-scanner ssrf-exploit

• Updated Apr 25, 2025
• Python

Simple Python Denial Of Service, reroutes stderr of a file open attempt into a recursive function opening the file

python dos hack hackers hacking recursive hacker commandinjection

• Updated Jan 14, 2023