docem

Payload injector

A tool to embed malicious payloads in various document formats

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

GitHub

526 stars
13 watching
88 forks
Language: Python
last commit: 10 months ago
Linked from 1 awesome list

bugbountyoxmlxssxss-injectionxxexxe-injection

Backlinks from these awesome lists:

Related projects:

Repository Description Stars
payloadbox/xxe-injection-payload-list Lists examples and types of XML external entity injection payloads and attacks 1,097
destine21/zipfileraider An extension for Burp Suite that allows testing of ZIP file payloads by injecting and manipulating the content of uploaded files. 70
tomcarver16/bof-dll-inject A tool for injecting malware into processes by mapping it to memory without registering it with the kernel. 147
airbus-cert/invoke-bof Loads and executes a malicious payload in a Windows system using PowerShell. 246
mik0w/pallms A collection of payloads designed to exploit vulnerabilities in large language models. 64
elfmaster/saruman Injects full dynamic executables into process images with thread injection 127
eusth/ipa A tool that injects code into Unity projects to modify their behavior 281
enjoiz/xxeinjector Automates exploitation of XXE vulnerability using various methods to retrieve files and data from vulnerable applications. 1,542
buffalowill/oxml_xxe A tool for exploiting XXE vulnerabilities in various file formats 1,038
apokryptein/secinject A tool for injecting malicious code into processes using native APIs and memory section mapping. 87
rodionovd/task_vaccine A C-based library that enables code injection into macOS processes by creating a new thread and executing a specific function within the process 54
mosure/inversify-cpp A C++17 inversion of control and dependency injection container library 14
jechol/definject A library that provides an unobtrusive way to inject mocks and dependencies into Elixir functions without modifying their code. 56
altrusl/vite-plugin-html-injection A plugin to inject reusable code snippets into HTML files during the build process for faster and more maintainable front-end development. 19
davidbuchanan314/dlinject A tool to inject arbitrary code into a live Linux process without using ptrace 775