List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.
☆83Mar 23, 2018Updated 8 years ago
Alternatives and similar repositories for WEB-INF-dict
Users that are interested in WEB-INF-dict are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp Suite extension for JAX-RS☆66Mar 17, 2017Updated 9 years ago
- ☆10Aug 8, 2015Updated 11 years ago
- List HackerOne private program assets☆157Jun 24, 2021Updated 5 years ago
- 各种漏洞poc、Exp的收集或编写☆32Jun 24, 2016Updated 10 years ago
- ☆61Apr 8, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆28Sep 25, 2020Updated 6 years ago
- spring mvc cve-2014-3625☆32Mar 11, 2016Updated 10 years ago
- Exploitation toolkit for RichFaces☆106Nov 3, 2023Updated 3 years ago
- WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropr…☆51Mar 19, 2026Updated 7 months ago
- Study about HQL injection exploitation.☆52May 15, 2016Updated 10 years ago
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- A tiny and cute URL fuzzer☆402Nov 10, 2022Updated 3 years ago
- ☆701Jul 4, 2022Updated 4 years ago
- Ruby interface to cirt.net default passwords database☆18May 4, 2011Updated 15 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Nov 18, 2019Updated 6 years ago
- URL Screenshot Utility☆28May 22, 2023Updated 3 years ago
- tetctf2020_amf_writeups☆20Jan 3, 2021Updated 5 years ago
- Burp Suite plugin for binary search on HTTP parameters☆17Oct 31, 2017Updated 9 years ago
- Exploiting Python PIL Module Command Execution Vulnerability☆55Nov 29, 2021Updated 4 years ago
- CVE-2017-13089☆55Nov 15, 2017Updated 8 years ago
- Another plugin for CRLF vulnerability detection☆25Jan 25, 2017Updated 9 years ago
- Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys☆676Feb 1, 2025Updated last year
- ☆420Jan 5, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆29Jun 27, 2022Updated 4 years ago
- cve-2014-0130 rails directory traversal vuln☆18May 15, 2017Updated 9 years ago
- Path traversal / LFI fuzzer in Go - 66 encoding bypass techniques, response analysis, goroutine concurrency, wordlist support, proxy (Bur…☆16Apr 10, 2026Updated 6 months ago
- Google Chrome Extension automates testing fundamental Web Problems via Chrome☆20Mar 18, 2021Updated 5 years ago
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆1,202Apr 3, 2026Updated 7 months ago
- Browser's XSS Filter Bypass Cheat Sheet☆1,160May 6, 2017Updated 9 years ago
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)☆691Jan 28, 2024Updated 2 years ago
- A rewrite of the popular altDNS subdomain tool by @infosec-au☆12Feb 28, 2019Updated 7 years ago
- differer finds how URLs are parsed by different languages in order to help bug hunters break filters☆63May 3, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 提权的文档☆54Jun 21, 2016Updated 10 years ago
- Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.☆205Feb 15, 2024Updated 2 years ago
- ☆283Nov 12, 2021Updated 4 years ago
- Small tool to log HTTP requests for debugging.☆16May 9, 2020Updated 6 years ago
- A Go implementation of dirsearch.☆41Mar 10, 2019Updated 7 years ago
- There is no pre-auth RCE in Jenkins since May 2017, but this is the one!☆608May 17, 2019Updated 7 years ago
- Continuous monitoring for JavaScript files☆224Dec 29, 2019Updated 6 years ago