https://github.com/xsscx/commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
https://github.com/xsscx/commodity-injection-signatures

burp burpsuite exploit fuzzing header html http injection injection-signatures input javascript malicious poc random rce xss

Last synced: 2 days ago
JSON representation

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

• Host: GitHub
• URL: https://github.com/xsscx/commodity-injection-signatures
• Owner: xsscx
• Created: 2015-02-01T02:06:13.000Z (almost 10 years ago)
• Default Branch: master
• Last Pushed: 2024-07-18T19:29:02.000Z (4 months ago)
• Last Synced: 2024-08-05T17:33:20.428Z (3 months ago)
• Topics: burp, burpsuite, exploit, fuzzing, header, html, http, injection, injection-signatures, input, javascript, malicious, poc, random, rce, xss
• Language: HTML
• Homepage: https://srd.cx
• Size: 6.05 MB
• Stars: 385
• Watchers: 14
• Forks: 117
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# XSS.Cx Public Repo



## whoami

I am David Hoyt.

  - https://hoyt.net

  - https://srd.cx

  - https://xss.cx

    

## Last Update: 22 JUNE 2024

- Added CVE-2024-38427 ICC Color Profile Sample PoC's

- Added CVE-2022-26730 ICC Color Profile Sample PoC's

- Added CVE Color Profile samples known to Crash many OS 

- https://srd.cx/cve-2022-26730/

- https://srd.cx/cve-2023-32443/

- Added PoC's from my CVE's in DemoMaxICC Reference Implementation [https://github.com/InternationalColorConsortium/DemoIccMAX]

  - Functionality in Skia, WebKit, Windows etc....

  - The color() function and custom color profiles are part of the CSS Colors Module Level 4, which is still a draft and not widely supported.

## About

- Commodity Injection Signatures

- Scraped Fresh from the Internet since 2015

- My PoC's from CVE's & Crashes 

## Suggested Use 

- Include with Burp Intruder or Custom Scripts

- Manual Injection Testing with Well-Known Signatures

- Automated Fuzzing with a Wide-Range with Malicious Inputs

- Abusing XNU, Windows or Linux   

### Recent Additions

- regex files to aid with apple security research device log analysis

- RBL focused on AD CDN's

- RBL focused on App Titles 

- XNU Crash Helpers for Apple Security Research Device circa 2023

### Pull Requests Welcome

__Happy Hunting!!__