GoSecure / dtd-finder

Related projects: ⓘ

• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆772Updated 2 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆502Updated 7 months ago
• PortSwigger / upload-scanner
  HTTP file upload scanner for Burp Proxy
  ☆394Updated last year
• incredibleindishell / SSRF_Vulnerable_Lab
  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  ☆663Updated last year
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆735Updated last year
• DiogoMRSilva / websitesVulnerableToSSTI
  Simple websites vulnerable to Server Side Template Injections(SSTI)
  ☆373Updated last year
• zricethezav / h1domains
  HackerOne "in scope" domains
  ☆394Updated this week
• allanlw / svg-cheatsheet
  A cheatsheet for exploiting server-side SVG processors.
  ☆672Updated 4 years ago
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆571Updated 2 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆479Updated 8 months ago
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆581Updated 3 years ago
• synacktiv / HopLa
  HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite
  ☆701Updated 3 years ago
• msrkp / PPScan
  Client Side Prototype Pollution Scanner
  ☆507Updated 2 years ago
• CoreyD97 / BurpCustomizer
  Because just a dark theme wasn't enough!
  ☆546Updated 2 years ago
• filedescriptor / untrusted-types
  ☆647Updated 2 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆250Updated last year
• jaeles-project / jaeles-signatures
  Default signature for Jaeles Scanner
  ☆319Updated 2 years ago
• chrislockard / api_wordlist
  A wordlist of API names for web application assessments
  ☆725Updated last year
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆515Updated 6 years ago
• random-robbie / keywords
  ☆349Updated 2 years ago
• nccgroup / LoggerPlusPlus
  Advanced Burp Suite Logging Extension
  ☆619Updated 3 months ago
• pyn3rd / Spring-Boot-Vulnerability
  ☆393Updated 2 years ago
• Bo0oM / WAF-bypass-Cheat-Sheet
  Another way to bypass WAF Cheat Sheet (draft)
  ☆416Updated 5 years ago
• PortSwigger / xss-cheatsheet-data
  This repository contains all the XSS cheatsheet data to allow contributions from the community.
  ☆398Updated 2 months ago
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆424Updated last year
• httpvoid / CVE-Reverse
  ☆277Updated 2 years ago
• AlephNullSK / dnsgen
  Generates combination of domain names from the provided input.
  ☆886Updated 2 months ago
• InitRoot / BurpJSLinkFinder
  Burp Extension for a passive scanning JS files for endpoint links.
  ☆728Updated 5 months ago
• tomnomnom / qsreplace
  Accept URLs on stdin, replace all query string values with a user-supplied value
  ☆745Updated last year
• ghsec / webHunt
  Web App bug hunting
  ☆549Updated 2 months ago