lc/230-OOB

Stars
166
Rank 227,748 (Top 5 %)
Language
Python
Created almost 7 years ago
Updated over 4 years ago

lc/230-OOB

lc

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

An Out-of-Band XXE server for retrieving file contents over FTP.

Out-of-Band XXE tool
A python script to achieve file read via FTP!

230OOB is a tool that emulates an FTP server, assisting you in achieving file read via Out-of-Band XXE.

Installation

git clone https://github.com/lc/230-OOB

Usage:

Generate an XXE payload & DTD at http://xxe.sh

Start the server:

python3 230.py 2121

everything will be logged to -> extracted.log

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

subjs

Fetches javascript file from a list of URLS or subdomains.

secretz

secretz, minimizing the large attack surface of Travis CI

theftfuzzer

TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.

hacks

Repo of useful scripts

cspparse

A tool to evaluate Content Security Policies.

jenkinz

jenkinz is a tool to retrieve every build for every job ever created and run on a given Jenkins instance.

otxurls

Fetch known urls from AlienVault's Open Threat Exchange for given hosts

brute53

A tool to bruteforce nameservers when working with subdomain delegations to AWS.

DOD-Recon

Recon for Department of Defense HackerOne program

research

miscellaneous security research stuff

reckdns

A kinda reckless dns resolver. Still under development.

rickrolllogs

tool to rick roll access.logs

sslc2

Simple C&C example in assembly that retrieves commands from the Organizational Unit (OU) field in an SSL certificate

rlyCTF

rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.

bugbountylink

URL Shortener using Flask & MySQL

lc.github.io

Information Security blog by Corben Leo @hacker_

newsletter-code

Repository for any code I send out in newsletters.

ctf-dev

Various CTF's I've created over time

solidity-by-example

My code for following along with the https://solidity-by-example.org/ course