{"id":13797164,"url":"https://github.com/EnableSecurity/Webapp-Exploit-Payloads","last_synced_at":"2025-05-13T02:31:22.521Z","repository":{"id":3083938,"uuid":"4107946","full_name":"EnableSecurity/Webapp-Exploit-Payloads","owner":"EnableSecurity","description":"a collection of payloads for common webapps","archived":true,"fork":false,"pushed_at":"2013-04-24T12:21:13.000Z","size":1583,"stargazers_count":74,"open_issues_count":1,"forks_count":25,"subscribers_count":8,"default_branch":"master","last_synced_at":"2024-08-04T23:10:56.638Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/EnableSecurity.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2012-04-22T23:17:52.000Z","updated_at":"2024-02-24T10:45:25.000Z","dependencies_parsed_at":"2022-09-10T20:40:40.067Z","dependency_job_id":null,"html_url":"https://github.com/EnableSecurity/Webapp-Exploit-Payloads","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EnableSecurity%2FWebapp-Exploit-Payloads","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EnableSecurity%2FWebapp-Exploit-Payloads/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EnableSecurity%2FWebapp-Exploit-Payloads/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/EnableSecurity%2FWebapp-Exploit-Payloads/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/EnableSecurity","download_url":"https://codeload.github.com/EnableSecurity/Webapp-Exploit-Payloads/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225167395,"owners_count":17431594,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T23:01:23.855Z","updated_at":"2024-11-18T11:30:47.192Z","avatar_url":"https://github.com/EnableSecurity.png","language":"JavaScript","funding_links":[],"categories":["\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集"],"sub_categories":[],"readme":"# Webapp Exploit Payloads\n\nA collection of payloads for common webapps and a tool to help\ngenerate them.\n\n\n## Usage:\n\nTo list the available payloads:\n\n\t$ ./genpayload.py -L \n\nTo generate one big JavaScript file called `out.js`:\n\n\t$ ./genpayload.py -p wordpress/newadmin -o out.js\n\nTo list valid parameters:\n\n\t$ ./genpayload.py -p wordpress/newadmin -H\n\nTo pass the parameters through command line:\n\n\t$ ./genpayload.py -p wordpress/newadmin -P usernewpage=http://victimsite/blog/wp-admin/user-new.php\n\nTo generate payload for crossdomain.xml exploitation:\n\n\t$ ./genpayload.py -p wordpress/newadmin -t swf -P usernewpage=http://victimsite/blog/wp-admin/user-new.php\n\nTo generate payload with an html file:\n\n\t$ ./genpayload.py -p wordpress/newadmin -t htmljs -P usernewpage=http://victimsite/blog/wp-admin/user-new.php\n\n## Payload types\n\n### JS\n\nOutputs a single JavaScript file that contains all the necessary libraries, such as \njQuery. This can then be included in your XSS. Can also be compressed if need be. \n\n### HTMLJS\n\nCreates a directory containing `index.html` and the included libraries. The html\nfile contains the payload JavaScript. \n\n### SWF\n\nCreates a directory containing `index.html` and all libraries, including the\nfiles needed for flXHR.\n\n### HTML5CORS\n\nSimilar to HTMLJS but makes the code work cross-domain thanks to HTML5 \ncross origin resource sharing. The victim server needs to trust the attacker server\nthrough the `Access-Control-Allow-Origin: http://attackersite` header and also the header\n`Access-Control-Allow-Credentials: true` needs to be set.\n\n## Directory structure\n\n### /bin\n\nThis is where `genpayload.py` resides.\n\n### /src\n\nThis is where all the code is generated from. \n\n#### /src/config\n\nA directory containing general configuration files. The file\n`settings.ini` is used to store one `statusurl` for all.  \n\n#### /src/includes\n\nA directory containing files that are included by the payloads. For example,\njquery and its plugins are stored here. There is also a common.js which \ncontains functions that are commonly used across most payloads. \n\n#### /src/payloads\n\nThis directory contains all the payloads. The subdirectories under this one\nare named after the product that they exploit, for example, wordpress. \nThere is one directory called generic where generic payloads are stored. \n\nEach payload has to contain a `config.ini` file that specifies the filename\nof the payload, other dependencies and default variable values. \n\n## Configuration files\n\nEach `config.ini` has the following sections:\n\n- `[config]` where all variables that do not fit anywhere else and their values are stored \n- `[locations]` where all URLs are stored .. these URLs become variables within the payload \n- `[dependencies]` which contains the following options:\n\t- `script` which is the filename of the payload\n\t- `jquery` which is the filename of the jquery script\n\t- `include` which is any other JavaScript files to be included in the final payload\n- `[about]` which contains information about the script including:\n\t- `description` which is a summary of what the payload does\n- `[includes]` which contains variable names whose values include filenames for files \n  that are read by the payload generator and then their contents end up a JavaScript \n  string in the payload. Useful for placing that backdoor php code","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FEnableSecurity%2FWebapp-Exploit-Payloads","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FEnableSecurity%2FWebapp-Exploit-Payloads","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FEnableSecurity%2FWebapp-Exploit-Payloads/lists"}