Dhamuharker / Server-Side-Template-Injection
Template injection allows an attacker to include template code into an existant (or not) template. A template engine makes designing HTML pages easier by using static template files which at runtime replaces variables/placeholders with actual values in the HTML pages
☆13Updated 5 years ago
Alternatives and similar repositories for Server-Side-Template-Injection:
Users that are interested in Server-Side-Template-Injection are comparing it to the libraries listed below
- ☆48Updated 4 years ago
- Image Tragick Exploit Tool Using Burp Collaborator☆35Updated 10 months ago
- Burp extension to generate multi-step CSRF POC.☆29Updated 5 years ago
- CVE-2020-9484 Mass Scanner, Scan a list of urls for Apache Tomcat deserialization (CVE-2020-9484) which could lead to RCE☆32Updated 4 years ago
- Writeup of CVE-2020-15906☆47Updated 4 years ago
- Nmap script to check vulnerability CVE-2021-21975☆28Updated 4 years ago
- A collection of simple tools and poc-builders☆39Updated 2 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆63Updated 4 years ago
- Bug Bounty Tools☆34Updated 4 years ago
- CVE, reports, research☆17Updated 4 years ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆44Updated 2 years ago
- Local File Inclusion Burp-Suite Intruder Payload Generator Plugin☆39Updated 4 years ago
- Security test tool for Blind XSS☆26Updated 5 years ago
- ☆60Updated 6 years ago
- Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack☆41Updated 2 years ago
- Simple Server Side Request Forgery services enumeration tool.☆55Updated 6 years ago
- Burp Bounty profiles☆82Updated 3 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This …☆60Updated 3 years ago
- Flask powered website to display tweets with a hashtag #bugbountytip☆16Updated 4 years ago
- 0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover☆57Updated 4 years ago
- A simple tool to detect wildcards domain based on Amass's wildcards detector.☆62Updated 3 years ago
- A Python script to parse net blocks & domain names from SPF record☆82Updated 4 years ago
- BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JS…☆39Updated 4 years ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Updated 4 years ago
- Auto Recon Bash Script☆31Updated 3 months ago
- web-based-fuzzer☆32Updated 4 years ago
- 该脚本为Citrix XenMobile 目录遍历漏洞（CVE-2020-8209）批量检测脚本。☆31Updated 4 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Updated 5 years ago
- ☆32Updated 5 years ago
- XSS reflector vulnerabilities exploitation extended.☆26Updated 3 years ago