The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
☆14Feb 10, 2022Updated 4 years ago
Alternatives and similar repositories for attack-surface-detector
Users that are interested in attack-surface-detector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Easily write tests and fuzz many different programs.☆12Dec 13, 2022Updated 3 years ago
- ☆13Apr 15, 2024Updated 2 years ago
- CSRF Scanner Extension for Burp Suite Pro☆22Feb 4, 2022Updated 4 years ago
- Inject code into .net applications☆14Nov 7, 2018Updated 7 years ago
- shellcode obfuscater and runner in golang☆11Aug 13, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- This contains the contents needed to deploy a home lab in VirtualBox.☆18Jul 6, 2020Updated 6 years ago
- (Unofficial) Ruby wrapper for the Bugcrowd HTTP API☆14Feb 27, 2017Updated 9 years ago
- Download all the HIBP passwords☆12Apr 6, 2023Updated 3 years ago
- Proof of Concept files for SensePost's blog - Painless intro to the linux userland heap☆22Aug 15, 2017Updated 9 years ago
- Given a list of domains and known IP and buckets that are owned, which might be susceptible to domain hijacking?☆16Sep 20, 2024Updated last year
- ☆28Jan 31, 2025Updated last year
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Sep 10, 2019Updated 6 years ago
- 12-week Geekwise course on web application security and hardening.☆17Mar 19, 2020Updated 6 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆31Oct 21, 2025Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Designed for automated enumeration for ethical hacking and penetration testing☆11Jan 17, 2018Updated 8 years ago
- PowerShell script to perform a REST API query to get IP address geo-location information☆15Oct 21, 2018Updated 7 years ago
- Ed is a tool used to identify and exploit accessible UNIX Domain Sockets☆27Mar 11, 2019Updated 7 years ago
- A plugin that provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other p…☆26Aug 22, 2017Updated 9 years ago
- An Erlang library wrapping AES-GCM (AEAD) crypto in a Fernet-like interface☆29Jan 22, 2021Updated 5 years ago
- POC for CVE-2020-9484☆13Feb 10, 2021Updated 5 years ago
- A comprehensive and hands-on workbook designed to sharpen your Active Directory penetration testing skills. Whether you're a red teamer, …☆19Feb 11, 2026Updated 6 months ago
- Wmap ("Web Mapper") Information gathering for web hacking.☆14Dec 3, 2014Updated 11 years ago
- OAuth 2.0 exploitation, attack and research tools.☆13Jan 20, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A reimagined and enhanced Minecraft utility mod inspired by TrouserStreak, built from the ground up for anarchy servers and advanced game…☆36Mar 7, 2026Updated 5 months ago
- Web弱密码爆破工具, 驱动浏览器进行弱密码爆破, 支持所有Web系统. 协程练手项目☆42Nov 14, 2022Updated 3 years ago
- A brief list of all the red teaming scenarios that can be easily used to validate your current company infrastructure. Scenarios are comp…☆18Jul 26, 2024Updated 2 years ago
- Simple python wrapper for the Robtex API (see https://www.robtex.com/api/).☆13Apr 17, 2021Updated 5 years ago
- ☆16Apr 16, 2015Updated 11 years ago
- This repo gives an overview of some GCP metadata API attack and defend patterns☆79Mar 23, 2020Updated 6 years ago
- Writeup of CVE-2017-1002101 with sample "exploit"/escape☆34Mar 23, 2018Updated 8 years ago
- Extract Sense out of Gibberish stuff☆81May 11, 2017Updated 9 years ago
- ☆16Jul 30, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Check read, write permissions on S3 buckets in your account☆21Jun 20, 2019Updated 7 years ago
- ☆13Jan 15, 2026Updated 7 months ago
- Meldown/Spectre proof of concept☆17Jan 15, 2018Updated 8 years ago
- Burp suite extension that lets you easily copy issues☆17Apr 3, 2026Updated 4 months ago
- Censys Maltego transforms! Take advantage of Censys transforms for Maltego to back your investigations with the most trusted Internet dat…☆40Jul 11, 2023Updated 3 years ago
- ☆18Jun 11, 2024Updated 2 years ago
- Installable taxii_services☆21May 10, 2019Updated 7 years ago