GBounty Profiles are customizable security test definitions used by the GBounty web scanner to identify vulnerabilities in web applications. These profiles outline a series of steps and conditions that the scanner follows during analysis, including specific requests, insertion points, and search patterns to detect vulnerabilities
☆25Mar 11, 2025Updated last year
Alternatives and similar repositories for gbounty-profiles
Users that are interested in gbounty-profiles are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identif…☆167Aug 28, 2025Updated last year
- Export to GBounty is a Burp Suite extension that enables users to export selected HTTP requests from Burp Suite into a compressed ZIP fil…☆11Oct 9, 2024Updated 2 years ago
- Burp extension to log requests and responses to PostgreSQL☆15Jun 30, 2025Updated last year
- Nuclei plugin for BurpSuite☆17Sep 22, 2026Updated last month
- Cleo Unrestricted file upload and download PoC (CVE-2024-50623)☆25Dec 11, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆13Nov 1, 2023Updated 2 years ago
- Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit☆18Jun 3, 2024Updated 2 years ago
- ☆24Apr 17, 2026Updated 6 months ago
- This extension integrates popular CAPTCHA solution services into BurpSuite to process different types of CAPTCHAs without manual interven…☆17Feb 16, 2026Updated 8 months ago
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Jul 23, 2024Updated 2 years ago
- Keycloak admin API allows low privilege users to use administrative functions☆32Oct 12, 2024Updated 2 years ago
- Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.☆12Feb 3, 2024Updated 2 years ago
- These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638)☆16Mar 12, 2017Updated 9 years ago
- Online-Crawler-Wayback-Machine☆27Oct 15, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Your bloodhound for hidden info in those JS files.☆19May 13, 2024Updated 2 years ago
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- Give me your APK, I will give you framework name☆15May 6, 2026Updated 5 months ago
- ☆11Mar 1, 2025Updated last year
- ☆25Nov 11, 2022Updated 3 years ago
- ☆24Oct 17, 2024Updated 2 years ago
- POC to decrypt SmartDeploy encrypted credentials☆12Aug 13, 2025Updated last year
- Burp extension to increment a parameter in each active scan request☆13Aug 6, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- burpsuite extension to analyze javascript files using semgrep☆13Feb 3, 2025Updated last year
- An Vulnerability detection and Exploitation tool for CVE-2024-7339☆17Aug 10, 2024Updated 2 years ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- POC for CVE-2024-31982: XWiki Platform Remote Code Execution > 14.10.20☆10Jun 22, 2024Updated 2 years ago
- An extension for Burp's Web Vulnerability Scanner that can detect API discovery metadata and extract data useful during recon.☆19Sep 13, 2025Updated last year
- Reconstruct javascript from a sourcemap in bash☆41Nov 23, 2021Updated 4 years ago
- Literally spray blind xss payloads everywhere.☆26Feb 22, 2022Updated 4 years ago
- ☆10Jul 8, 2024Updated 2 years ago
- The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.…☆12May 6, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Exploit for CVE-2024-3273, supports single and multiple hosts☆13Apr 7, 2024Updated 2 years ago
- exploit CVE-2024-40725 (Apache httpd) with☆12Dec 18, 2024Updated last year
- Ollama AI Analyzer runs directly on your local computer, using Ollama's AI models to analyze your HTTP requests and responses. This means…☆33Mar 1, 2025Updated last year
- Unveiling Cyber Threats: From assets to Vulnerability Insights☆18Aug 11, 2026Updated 2 months ago
- ☆22Jul 15, 2023Updated 3 years ago
- Will attempt to retrieve DB details for FastAdmin instances☆66Aug 20, 2024Updated 2 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago