Charlie-belmer / nosqli
NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
☆356Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for nosqli
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆496Updated 2 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆804Updated 2 years ago
- Client Side Prototype Pollution Scanner☆511Updated 2 years ago
- List DTDs and generate XXE payloads using those local DTDs.☆614Updated 9 months ago
- Default signature for Jaeles Scanner☆319Updated 2 years ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆295Updated this week
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆615Updated this week
- Gotator is a tool to generate DNS wordlists through permutations.☆457Updated 2 years ago
- ☆528Updated 11 months ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆337Updated 3 months ago
- Nuclei templates written by us.☆266Updated 3 years ago
- a javascript change monitoring tool for bugbounties☆589Updated 3 months ago
- Fetches javascript file from a list of URLS or subdomains.☆740Updated last year
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)☆528Updated 9 months ago
- Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools☆265Updated 4 months ago
- Automated learning of regexes for DNS discovery☆359Updated last year
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆296Updated last year
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆651Updated 2 years ago
- HTTP Request Smuggling Detection Tool☆472Updated 11 months ago
- A tool to check a bunch of URLs that contain reflecting params.☆539Updated 3 months ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆533Updated 11 months ago
- Accept URLs on stdin, replace all query string values with a user-supplied value☆768Updated 2 years ago
- DNS rebinding toolkit☆250Updated last year
- Unofficial documentation for the great tool Param Miner☆173Updated 2 years ago
- Burpsuite plugin for Interact.sh☆198Updated 4 months ago
- A Security Tool for Enumerating WebSockets☆334Updated 2 years ago
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆589Updated last year
- ☆656Updated 2 years ago
- DOM XSS scanner for Single Page Applications☆394Updated 4 months ago