Burp extension to detect alias traversal via NGINX misconfiguration at scale.
☆54Dec 3, 2021Updated 4 years ago
Alternatives and similar repositories for nginx-alias-traversal
Users that are interested in nginx-alias-traversal are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆265Nov 18, 2021Updated 4 years ago
- 致远OA通过发送特殊请求获取管理员cookie，再通过文件上传接口上传webshell压缩文件，最后发送解压请求获取webshell☆10Apr 11, 2021Updated 5 years ago
- Extract parameters/paths from urls☆17Aug 2, 2020Updated 5 years ago
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 3 years ago
- An AntSword's plugin to scan webshell☆16Sep 2, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This repo contains Axis web shells☆18Jun 15, 2019Updated 6 years ago
- LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。☆14Jul 7, 2019Updated 6 years ago
- Tiny library to parse the subdomain, domain, and tld extension from a host string☆23Apr 1, 2022Updated 4 years ago
- This repository holds a target infrastructure you can use for running the nimbostratus tools.☆24Mar 9, 2015Updated 11 years ago
- Endpoint monitor tool☆21Sep 16, 2020Updated 5 years ago
- Issues to consider when planning a red team exercise.☆15Aug 22, 2017Updated 8 years ago
- Security tool to find potential vulnerable Server Side Request Forgery (SSRF) parameters.☆360Feb 13, 2026Updated 2 months ago
- Virtual host wordlist☆52Jan 12, 2021Updated 5 years ago
- C# DCOM Execution☆17Aug 4, 2019Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Collection of different exploitation scenarios of JWT.☆21Jul 23, 2021Updated 4 years ago
- List out all of payload for security testing☆23May 2, 2022Updated 3 years ago
- CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE☆31Mar 13, 2019Updated 7 years ago
- Basic Bash Script to scrape all subdomains from crtsh in a single run☆19May 23, 2022Updated 3 years ago
- Weblogic Unrestricted File Upload☆54Apr 17, 2019Updated 7 years ago
- CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE☆63Jun 1, 2023Updated 2 years ago
- CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe☆16Jul 6, 2019Updated 6 years ago
- ☆11Jun 19, 2024Updated last year
- ☆37Sep 12, 2018Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Shellcode Loader Engine for Windows☆27Jan 29, 2017Updated 9 years ago
- Hidden parameters discovery suite☆224Nov 14, 2022Updated 3 years ago
- Cobalt Strike Wrapper☆21Aug 13, 2025Updated 8 months ago
- burp插件开发笔记☆11Dec 26, 2021Updated 4 years ago
- Installs And Executes Shellcode☆12Jul 26, 2015Updated 10 years ago
- One liner regex match to search inside JS files, using curl and grep!☆29Dec 26, 2021Updated 4 years ago
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆74Jan 4, 2021Updated 5 years ago
- This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.☆21Sep 14, 2023Updated 2 years ago
- A burp-suite plugin that extract all parameter names from in-scope requests☆29Nov 9, 2021Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Java 反序列化学习的实验代码 Java_deserialize_vuln_lab☆87Nov 26, 2018Updated 7 years ago
- One CTF Platform☆20Dec 4, 2019Updated 6 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated last year
- A docker image which will enumerate, sort, unique and resolve the results of various subdomains enumeration tools.☆71Jul 19, 2024Updated last year
- Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.☆32Sep 20, 2020Updated 5 years ago
- fastjson-1.2.61-RCE☆33Sep 26, 2019Updated 6 years ago
- 又一款敏感文件泄漏检测工具☆105Sep 29, 2019Updated 6 years ago