├── .gitignore ├── LICENSE ├── PoC ├── csrf │ ├── CORS │ │ ├── get.php │ │ ├── index.html │ │ └── post.php │ └── jsonp.html └── race_condition │ ├── pay_poc.py │ └── upload_poc.py ├── class └── function.class.php ├── code_exec ├── code.php └── exec.php ├── conn.php ├── csrf ├── jsonp.php └── userinfo.php ├── docker.md ├── file_include ├── any_include.php ├── include_1.php └── txt.txt ├── file_upload ├── any_upload.php ├── upload │ └── test.txt ├── upload_content.php ├── upload_js.php ├── upload_mime.php └── upload_name.php ├── img ├── dorabox.png └── image.png ├── index.html ├── others └── file_read.php ├── pentest.sql ├── race_condition ├── key.php ├── pay.php ├── upload.php └── uploads │ └── test.txt ├── readme.md ├── sql_injection ├── sql_num.php ├── sql_search.php └── sql_string.php ├── ssrf └── ssrf.php ├── xss ├── dom_xss.php ├── reflect_xss.php └── stored_xss.php └── xxe ├── index.html └── login.php /.gitignore: -------------------------------------------------------------------------------- 1 | .DS_Store 2 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/LICENSE -------------------------------------------------------------------------------- /PoC/csrf/CORS/get.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/PoC/csrf/CORS/get.php -------------------------------------------------------------------------------- /PoC/csrf/CORS/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/PoC/csrf/CORS/index.html -------------------------------------------------------------------------------- /PoC/csrf/CORS/post.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/PoC/csrf/CORS/post.php -------------------------------------------------------------------------------- /PoC/csrf/jsonp.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/PoC/csrf/jsonp.html -------------------------------------------------------------------------------- /PoC/race_condition/pay_poc.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/PoC/race_condition/pay_poc.py -------------------------------------------------------------------------------- /PoC/race_condition/upload_poc.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/PoC/race_condition/upload_poc.py -------------------------------------------------------------------------------- /class/function.class.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/class/function.class.php -------------------------------------------------------------------------------- /code_exec/code.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/code_exec/code.php -------------------------------------------------------------------------------- /code_exec/exec.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/code_exec/exec.php -------------------------------------------------------------------------------- /conn.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/conn.php -------------------------------------------------------------------------------- /csrf/jsonp.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/csrf/jsonp.php -------------------------------------------------------------------------------- /csrf/userinfo.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/csrf/userinfo.php -------------------------------------------------------------------------------- /docker.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/docker.md -------------------------------------------------------------------------------- /file_include/any_include.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/file_include/any_include.php -------------------------------------------------------------------------------- /file_include/include_1.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/file_include/include_1.php -------------------------------------------------------------------------------- /file_include/txt.txt: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /file_upload/any_upload.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/file_upload/any_upload.php -------------------------------------------------------------------------------- /file_upload/upload/test.txt: -------------------------------------------------------------------------------- 1 | test 2 | -------------------------------------------------------------------------------- /file_upload/upload_content.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/file_upload/upload_content.php -------------------------------------------------------------------------------- /file_upload/upload_js.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/file_upload/upload_js.php -------------------------------------------------------------------------------- /file_upload/upload_mime.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/file_upload/upload_mime.php -------------------------------------------------------------------------------- /file_upload/upload_name.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/file_upload/upload_name.php -------------------------------------------------------------------------------- /img/dorabox.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/img/dorabox.png -------------------------------------------------------------------------------- /img/image.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/img/image.png -------------------------------------------------------------------------------- /index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/index.html -------------------------------------------------------------------------------- /others/file_read.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/others/file_read.php -------------------------------------------------------------------------------- /pentest.sql: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/pentest.sql -------------------------------------------------------------------------------- /race_condition/key.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/race_condition/key.php -------------------------------------------------------------------------------- /race_condition/pay.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/race_condition/pay.php -------------------------------------------------------------------------------- /race_condition/upload.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/race_condition/upload.php -------------------------------------------------------------------------------- /race_condition/uploads/test.txt: -------------------------------------------------------------------------------- 1 | test 2 | -------------------------------------------------------------------------------- /readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/readme.md -------------------------------------------------------------------------------- /sql_injection/sql_num.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/sql_injection/sql_num.php -------------------------------------------------------------------------------- /sql_injection/sql_search.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/sql_injection/sql_search.php -------------------------------------------------------------------------------- /sql_injection/sql_string.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/sql_injection/sql_string.php -------------------------------------------------------------------------------- /ssrf/ssrf.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/ssrf/ssrf.php -------------------------------------------------------------------------------- /xss/dom_xss.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/xss/dom_xss.php -------------------------------------------------------------------------------- /xss/reflect_xss.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/xss/reflect_xss.php -------------------------------------------------------------------------------- /xss/stored_xss.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/xss/stored_xss.php -------------------------------------------------------------------------------- /xxe/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/xxe/index.html -------------------------------------------------------------------------------- /xxe/login.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0verSp4ce/DoraBox/HEAD/xxe/login.php --------------------------------------------------------------------------------