docem

Payload injector

A tool to embed malicious payloads in various document formats

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

GitHub

553 stars
13 watching
94 forks
Language: Python
last commit: over 2 years ago
Linked from 1 awesome list

bugbountyoxmlxssxss-injectionxxexxe-injection

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
payloadbox/xxe-injection-payload-listLists examples and types of XML external entity injection payloads and attacks1,110
destine21/zipfileraiderAn extension for Burp Suite that allows testing of ZIP file payloads by injecting and manipulating the content of uploaded files.70
tomcarver16/bof-dll-injectA tool for injecting malware into processes by mapping it to memory without registering it with the kernel.147
airbus-cert/invoke-bofLoads and executes a malicious payload in a Windows system using PowerShell.245
mik0w/pallmsA collection of payloads designed to exploit vulnerabilities in large language models.70
elfmaster/sarumanA tool for injecting full dynamic executables into process images with thread injection128
eusth/ipaA tool that injects code into Unity projects to modify their behavior283
enjoiz/xxeinjectorAutomates exploitation of XXE vulnerability using various methods to retrieve files and data from vulnerable applications.1,556
buffalowill/oxml_xxeA tool for exploiting XXE vulnerabilities in various file formats1,049
apokryptein/secinjectA tool for injecting malicious code into processes using native APIs and memory section mapping.88
rodionovd/task_vaccineA C-based library that enables code injection into macOS processes by creating a new thread and executing a specific function within the process54
mosure/inversify-cppA C++17 inversion of control and dependency injection container library14
jechol/definjectA library that provides an unobtrusive way to inject mocks and dependencies into Elixir functions without modifying their code.56
altrusl/vite-plugin-html-injectionA plugin to inject reusable code snippets into HTML files during the build process for faster and more maintainable front-end development.21
davidbuchanan314/dlinjectA tool to inject arbitrary code into a live Linux process without using ptrace774