A security tool to fingerprint PNG libraries used by web applications
☆81Apr 28, 2019Updated 7 years ago
Alternatives and similar repositories for fingerping
Users that are interested in fingerping are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.☆12Sep 30, 2018Updated 8 years ago
- A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers☆15Sep 4, 2014Updated 12 years ago
- A security scanner for Wordpress blogging engine☆32May 11, 2016Updated 10 years ago
- Cli interface to threatcrowd.org☆21Jul 6, 2017Updated 9 years ago
- An extension for BurpSuite that highlights SSO messages in Burp's proxy window..☆120Apr 26, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scripts that I've written that others may find useful☆14Aug 17, 2022Updated 4 years ago
- Deprecated please use https://github.com/Netflix/sleepy-puppy☆97Aug 23, 2018Updated 8 years ago
- Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.☆48Jul 20, 2022Updated 4 years ago
- This is a small extension to make graphql readable☆30Dec 14, 2018Updated 7 years ago
- https://sites.google.com/securifyinc.com/secblogs/finding-leaked-sensitive-data☆17Jun 14, 2018Updated 8 years ago
- An automated XSS payload generator written in python.☆313Jun 2, 2016Updated 10 years ago
- A small web app to check if your (Australian) voicemail is vulnerable to information disclosure.☆13Jul 15, 2014Updated 12 years ago
- Cloudflare DNS Enumeration Tool for Pentesters☆525Aug 6, 2022Updated 4 years ago
- Retrieve SSH public keys from remote hosts.☆18Mar 19, 2013Updated 13 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- A vulnerable LDAP based web app written in Golang☆83Oct 31, 2023Updated 2 years ago
- XSS Weaponization☆34Sep 23, 2013Updated 13 years ago
- MyDoorOpener - HTTP server running on Arduino.☆12Jan 9, 2015Updated 11 years ago
- Materials related to the 2017 BSides Las Vegas presentation☆52Jan 1, 2021Updated 5 years ago
- All the content from my Troopers 19 talk☆10Mar 20, 2019Updated 7 years ago
- Detects code differentials between executables in disk and the corresponding processes/modules in memory☆114Jun 19, 2020Updated 6 years ago
- ☆12May 4, 2014Updated 12 years ago
- An interactive OOB XXE data exfiltration tool☆91May 31, 2017Updated 9 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Shorten (mangle) names in JavaScript code☆20Nov 15, 2018Updated 7 years ago
- Terraform configuration to build a Burp Private Collaborator Server☆25Nov 7, 2017Updated 8 years ago
- ☆18Apr 23, 2014Updated 12 years ago
- Python In The Middle : a Python implementation of MITM attacks.☆15Apr 17, 2015Updated 11 years ago
- It's bloody scantastic☆237Jun 21, 2022Updated 4 years ago
- Live-Armor: Building Custom Linux Live Images for Security Sandboxing☆11Mar 25, 2015Updated 11 years ago
- ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.☆104Feb 11, 2019Updated 7 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆262May 16, 2025Updated last year
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 8 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- GoPhish is a phishing script that enables rapid deployment of phishing sites.☆29Sep 13, 2018Updated 8 years ago
- a CMD shell in masm that listens on port 8080☆12Dec 19, 2020Updated 5 years ago
- Simple script for PGP encrypted newsletter☆27Feb 13, 2016Updated 10 years ago
- Simple webinterface combining different recon tools.☆12Mar 2, 2018Updated 8 years ago
- A permutation generation tool written in golang☆213Jul 15, 2019Updated 7 years ago
- Simple multi threaded tool to extract domain related data from commoncrawl.org☆30Jul 17, 2018Updated 8 years ago
- Web Application Security☆133Jan 6, 2026Updated 9 months ago