BlackFan/WEB-INF-dict external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

BlackFan/WEB-INF-dict

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/BlackFan/WEB-INF-dict)

Close

BlackFan / WEB-INF-dictView on GitHubMore

• External links
• Readme badge

List of configuration files from WEB-INF and META-INF for use in Unvalidated Forwards and JSP Include vulnerabilities.

☆83Mar 23, 2018Updated 8 years ago

Alternatives and similar repositories for WEB-INF-dict

Users that are interested in WEB-INF-dict are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• 0ang3el / Unsafe-JAX-RS-Burp

  View on GitHub
  Burp Suite extension for JAX-RS
  ☆66Mar 17, 2017Updated 9 years ago
• minight / h2csmuggler

  View on GitHub
  ☆29Sep 25, 2020Updated 5 years ago
• Leoid / chru

  View on GitHub
  ☆30Jun 27, 2022Updated 4 years ago
• defparam / h1passets

  View on GitHub
  List HackerOne private program assets
  ☆157Jun 24, 2021Updated 5 years ago
• RandomRobbieBF / service-now

  View on GitHub
  Service-Now Article Bruteforcer
  ☆16Jun 5, 2020Updated 6 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• orangetw / Some-PoC-oR-ExP

  View on GitHub
  各种漏洞poc、Exp的收集或编写
  ☆32Jun 24, 2016Updated 10 years ago
• Virvales / BurpEnforcer

  View on GitHub
  ☆10Aug 8, 2015Updated 11 years ago
• 0xsapra / fuzzparam

  View on GitHub
  ☆59Apr 8, 2021Updated 5 years ago
• JavaPentesters / java_vul_target

  View on GitHub
  ☆27Oct 16, 2017Updated 8 years ago
• ilmila / springcss-cve-2014-3625

  View on GitHub
  spring mvc cve-2014-3625
  ☆32Mar 11, 2016Updated 10 years ago
• orangetw / Tiny-URL-Fuzzer

  View on GitHub
  A tiny and cute URL fuzzer
  ☆402Nov 10, 2022Updated 3 years ago
• redtimmy / Richsploit

  View on GitHub
  Exploitation toolkit for RichFaces
  ☆105Nov 3, 2023Updated 2 years ago
• securityroots / passdb

  View on GitHub
  Ruby interface to cirt.net default passwords database
  ☆18May 4, 2011Updated 15 years ago
• omarkurt / cve-2014-0130

  View on GitHub
  cve-2014-0130 rails directory traversal vuln
  ☆18May 15, 2017Updated 9 years ago
• GPU virtual machines on DigitalOcean Gradient AI • Ad
  Get to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
• vah13 / BurpCRLFPlugin

  View on GitHub
  Another plugin for CRLF vulnerability detection
  ☆25Jan 25, 2017Updated 9 years ago
• honoki / wilson-cloud-respwnder

  View on GitHub
  WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropr…
  ☆51Mar 19, 2026Updated 4 months ago
• neargle / PIL-RCE-By-GhostButt

  View on GitHub
  Exploiting Python PIL Module Command Execution Vulnerability
  ☆55Nov 29, 2021Updated 4 years ago
• 0ang3el / Hibernate-Injection-Study

  View on GitHub
  Study about HQL injection exploitation.
  ☆52May 15, 2016Updated 10 years ago
• mzeyong / CVE-2017-13089

  View on GitHub
  CVE-2017-13089
  ☆55Nov 15, 2017Updated 8 years ago
• jimen0 / differer

  View on GitHub
  differer finds how URLs are parsed by different languages in order to help bug hunters break filters
  ☆63May 3, 2020Updated 6 years ago
• filedescriptor / untrusted-types

  View on GitHub
  ☆699Jul 4, 2022Updated 4 years ago
• Leoid / NonPublishedExploits

  View on GitHub
  A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs
  ☆10Nov 29, 2020Updated 5 years ago
• 0xacb / viewgen

  View on GitHub
  Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  ☆667Feb 1, 2025Updated last year
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• beched / BurpArgsFind

  View on GitHub
  Burp Suite plugin for binary search on HTTP parameters
  ☆17Oct 31, 2017Updated 8 years ago
• SecureSkyTechnology / study-struts2-s2-054_055-jackson-cve-2017-7525_cve-2017-15095

  View on GitHub
  Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告
  ☆106Dec 13, 2017Updated 8 years ago
• pelaohxc / postMessageFinder

  View on GitHub
  ☆36Jul 15, 2020Updated 6 years ago
• Healdb / Gather

  View on GitHub
  URL Screenshot Utility
  ☆28May 22, 2023Updated 3 years ago
• ayoubfathi / leaky-paths

  View on GitHub
  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…
  ☆1,193Apr 3, 2026Updated 4 months ago
• neargle / tips-note

  View on GitHub
  做过的实验，踩过的坑
  ☆39Jun 7, 2018Updated 8 years ago
• niemand-sec / RazorSyntaxWebshell

  View on GitHub
  Webshell for Razor Syntax (C#)
  ☆18May 5, 2017Updated 9 years ago
• riramar / h2rs

  View on GitHub
  Detects request smuggling via HTTP/2 downgrades.
  ☆94Jul 30, 2022Updated 4 years ago
• hpy / permDNS

  View on GitHub
  A rewrite of the popular altDNS subdomain tool by @infosec-au
  ☆12Feb 28, 2019Updated 7 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• righettod / burp-piper-custom-scripts

  View on GitHub
  Custom scripts for the PIPER Burp extensions.
  ☆98Sep 24, 2023Updated 2 years ago
• zcgonvh / JavaTimeAgent

  View on GitHub
  fix time for java application using javaAgent
  ☆24Dec 3, 2017Updated 8 years ago
• jasonsheh / SiteScan

  View on GitHub
  A tool help get the basic information of one site
  ☆106Jan 14, 2019Updated 7 years ago
• momenbasel / liffier

  View on GitHub
  Path traversal / LFI fuzzer in Go - 66 encoding bypass techniques, response analysis, goroutine concurrency, wordlist support, proxy (Bur…
  ☆16Apr 10, 2026Updated 4 months ago
• codingo / microsubs

  View on GitHub
  A collection of code for interacting with API sources directly to improve your understanding of those services.
  ☆66Dec 11, 2020Updated 5 years ago
• BlackFan / CVE_PoCs

  View on GitHub
  CVE PoCs
  ☆21Jul 16, 2020Updated 6 years ago
• yassineaboukir / CVE-2018-0296

  View on GitHub
  Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.
  ☆205Feb 15, 2024Updated 2 years ago