QeeqBox
State-of-the-art opensource projects and services for red, purple, and blue teams
- 718 followers
- Washington, USA
- https://qeeqbox.com
Pinned Loading
Repositories
Showing 10 of 94 repositories
-
- xxe-injection Public
A threat actor may interfere with an application's processing of extensible markup language (XML) data to view the content of a target's files
- xslt-injection Public
A threat actor may interfere with an application's processing of extensible stylesheet language transformations (XSLT) for extensible markup language (XML) to read or modify data on the target
- xml-injection Public
A threat actor may exploit XML processing in an application to read, alter, or disrupt data.
- os-command-injection Public
A threat actor may inject arbitrary operating system (OS) commands on target
- open-redirect Public
A threat actor may send a malicious redirect request for a vulnerable target to a victim; the victim gets redirected to a malicious website that threat actor controls
- dom-based-cross-site-scripting Public
A threat actor may inject malicious content into webapp. The payload is not reflected in the HTTP request and response, then executed in the victim's browser
- reflected-cross-site-scripting Public
A threat actor may inject malicious content into webapp. The payload is reflected in the HTTP request and response, then executed in the victim's browser
- stored-cross-site-scripting Public
A threat actor may inject malicious content into a vulnerable target
- session-replay Public
A threat actor may re-use a stolen or leaked session identifier to access the user's account