QeeqBox
State-of-the-art opensource projects and services for red, purple, and blue teams
- 706 followers
- Washington, USA
- https://qeeqbox.com
Pinned Loading
Repositories
Showing 10 of 93 repositories
- open-redirect Public
A threat actor may send a malicious redirect request for a vulnerable target to a victim; the victim gets redirected to a malicious website that threat actor controls
- dom-based-cross-site-scripting Public
A threat actor may inject malicious content into webapp. The payload is not reflected in the HTTP request and response, then executed in the victim's browser
- reflected-cross-site-scripting Public
A threat actor may inject malicious content into webapp. The payload is reflected in the HTTP request and response, then executed in the victim's browser
- stored-cross-site-scripting Public
A threat actor may inject malicious content into a vulnerable target
- os-command-injection Public
A threat actor may inject arbitrary operating system (OS) commands on target
- session-replay Public
A threat actor may re-use a stolen or leaked session identifier to access the user's account
- local-file-inclusion Public
A threat actor may cause a vulnerable target to include/retrieve local file
- session-fixation Public
A threat actor may trick a user into using a known session identifier to log in. after logging in, the session identifier is used to gain access to the user's account
- server-side-template-injection Public
A threat actor may alter the template syntax on the vulnerable target to execute commands
- captcha-bypass Public
A threat actor may bypass the Completely Automated Public Turing test to tell Computers and Humans Apart (captcha) by breaking the solving logic, human-assisted solving services, or utilizing automated technology
Top languages
Loading…
Most used topics
Loading…