A Complete SSRF (Server Side Request Forgery) Scanner.
☆39Jul 20, 2026Updated 2 months ago
Alternatives and similar repositories for SSRF-Scanner
Users that are interested in SSRF-Scanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This Repo clone and organize all nuclei templates that are found in Github. { due to git runner time limit stopped the workflow, ping me …☆13Feb 28, 2025Updated last year
- ☆12Jun 16, 2021Updated 5 years ago
- Remote Code Execution EJS Web Applications using express-fileupload☆13Aug 17, 2021Updated 5 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆13May 10, 2022Updated 4 years ago
- Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.☆111Feb 14, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Differential access-control testing for IDOR/BOLA - drives multiple identities at the same objects and proves when one can read another's…☆14Sep 23, 2026Updated 3 weeks ago
- ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …☆34Dec 13, 2023Updated 2 years ago
- 🎯 SQL Injection Payload List☆12Jun 6, 2021Updated 5 years ago
- Nuclei templates to run on urls☆18Sep 14, 2023Updated 3 years ago
- Describe how to use ffuf different options with examples☆14Jun 13, 2022Updated 4 years ago
- Pentest-Command☆20Nov 10, 2021Updated 4 years ago
- CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to uploa…☆13Jan 7, 2025Updated last year
- AI-based Web Application Penetration Testing Tool☆26Jan 19, 2024Updated 2 years ago
- Tool to extract all subdomains from crt.sh search using RegEx and Web Scraping☆23Jan 5, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Python based scanner to find potential SSRF parameters in a web application.☆69Jul 12, 2021Updated 5 years ago
- Zendar is a Linux rootkit based off of the LD_PRELOAD method used by Azazel and Jynx alike☆17Mar 20, 2015Updated 11 years ago
- 多线程批量扫描ssrf漏洞☆29Sep 6, 2017Updated 9 years ago
- A simple automation tool to detect lfi, rce and ssti vulnerability☆57Feb 15, 2022Updated 4 years ago
- Burp extension used to snip any header from all the requests.☆25Nov 12, 2023Updated 2 years ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆17Jan 31, 2021Updated 5 years ago
- ☆15Dec 27, 2022Updated 3 years ago
- ☆12May 31, 2023Updated 3 years ago
- Extracted lua script from Defender mpavbase.vdm and mpasbase.vdm☆15Jul 5, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Cloudpanel 0-day Exploit☆55Jul 24, 2023Updated 3 years ago
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆21Apr 14, 2021Updated 5 years ago
- ☆62May 30, 2023Updated 3 years ago
- Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against mal…☆303Aug 19, 2026Updated last month
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆13Nov 1, 2023Updated 2 years ago
- A list of ChatGPT Prompts for Web Application Security, Bug Bounty, and Pentesting☆40May 18, 2023Updated 3 years ago
- ☆47Feb 11, 2023Updated 3 years ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- CVE-2023-46818 IPSConfig Python exploit☆18Oct 8, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- FETB : Take URL of File For Analysis using File + ExifTool + Binwalk Commands☆20Feb 2, 2021Updated 5 years ago
- ThinkPHP vulnerability scan for BurpSuite☆15Nov 18, 2019Updated 6 years ago
- LLM Supported Attack Scenario Creator from Code Review☆14Oct 22, 2024Updated last year
- Attack Surface Discovery Tool☆109Sep 17, 2024Updated 2 years ago
- an exploit of Server-side request forgery (SSRF)☆56Aug 2, 2024Updated 2 years ago
- Search and download dictionaries for testing, bruteforcing, fuzzing and exploit-development.☆14Aug 11, 2021Updated 5 years ago
- ☆28Sep 1, 2022Updated 4 years ago