Automattic / wpscan-vulnerability-test-benchLinks
Standardised setup for researching WordPress plugin- and theme vulnerabilities.
☆28Updated 2 years ago
Alternatives and similar repositories for wpscan-vulnerability-test-bench
Users that are interested in wpscan-vulnerability-test-bench are comparing it to the libraries listed below
Sorting:
- Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based …☆105Updated 6 months ago
- Simple PoC for demonstrating Race Conditions on Websockets☆55Updated 2 years ago
- ☆42Updated 2 months ago
- Scripts to download every Wordpress plugin (updated in the last 2 years) and run Semgrep over the lot of it while storing output in a dat…☆89Updated 11 months ago
- ☆27Updated 2 years ago
- Token Tailor is a Burp Suite Community Edition extension that aims to simplify security testing by automating JWT renewal.☆35Updated 4 months ago
- Security Advisories☆35Updated 2 months ago
- Make better use of the embedded browser that comes by default with Burp☆44Updated 2 years ago
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆73Updated 3 years ago
- A Burp Suite extension for analyzing Next.js Server Actions - server-side functions identified by hash IDs and `Next-Action` headers.☆43Updated 5 months ago
- Review of AWAE.OSWE☆31Updated 3 years ago
- A BurpSuite extension to deploy an OpenVPN config file to DigitalOcean and set up a SOCKS proxy to route traffic through it☆51Updated 2 months ago
- Exploit for Symfony CVE-2024-50340 (forked eos)☆29Updated last year
- Unicode Security Toolkit☆40Updated last year
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Updated last year
- Web cache poisoning vulnerability scanner.☆72Updated 3 years ago
- ☆94Updated last month
- ☆43Updated 2 years ago
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆126Updated last year
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆61Updated 2 years ago
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆54Updated last year
- vhost scanning☆37Updated 2 years ago
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆21Updated last year
- Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications☆32Updated 3 years ago
- Burp Suite Extension for inserting a magic byte into responder's request☆24Updated 2 years ago
- Unicode characters that will translate a single character to multiple characters in domain names or TLD's☆50Updated last year
- A fast enumeration tool for publicly exposed Azure Storage blobs.☆116Updated 2 years ago
- A list of threat sinks used in the manual security source code review for application security☆76Updated 2 years ago
- Make exploiting race conditions in web applications highly efficient and ease-of-use.☆27Updated 7 months ago
- Sample Obsidian's vault for web pentesting☆102Updated last year