Alternatives and similar repositories for nginx-alias-traversal

Users that are interested in nginx-alias-traversal are comparing it to the libraries listed below

• bayotop / off-by-slash

  View on GitHub
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆265Nov 18, 2021Updated 4 years ago
• MindPatch / pmg

  View on GitHub
  Extract parameters/paths from urls
  ☆17Aug 2, 2020Updated 5 years ago
• virink / as_scanwebshell

  View on GitHub
  An AntSword's plugin to scan webshell
  ☆16Sep 2, 2019Updated 6 years ago
• vysecurity / WindfarmDynamite-CNA

  View on GitHub
  CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe
  ☆16Jul 6, 2019Updated 6 years ago
• NaxAlpha / shellcode-loader

  View on GitHub
  Shellcode Loader Engine for Windows
  ☆27Jan 29, 2017Updated 9 years ago
• lsh4ck / Langzi_SRC_Safe_Cruise

  View on GitHub
  LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。
  ☆14Jul 7, 2019Updated 6 years ago
• incredibleindishell / axis_web_shell

  View on GitHub
  This repo contains Axis web shells
  ☆18Jun 15, 2019Updated 6 years ago
• benpturner / Invoke-DCOM

  View on GitHub
  C# DCOM Execution
  ☆18Aug 4, 2019Updated 6 years ago
• ni8walk3r / JWT-Exploitation

  View on GitHub
  Collection of different exploitation scenarios of JWT.
  ☆21Jul 23, 2021Updated 4 years ago
• Jackence / yunpansearch

  View on GitHub
  搜索几个网站的云盘资源，并过滤到失效链接，最后不保证资源的有效性
  ☆20Jun 25, 2018Updated 7 years ago
• pyn3rd / CVE-2019-2618

  View on GitHub
  Weblogic Unrestricted File Upload
  ☆54Apr 17, 2019Updated 6 years ago
• jas502n / fastjson-1.2.61-RCE

  View on GitHub
  fastjson-1.2.61-RCE
  ☆33Sep 26, 2019Updated 6 years ago
• rockybhai0516 / maha

  View on GitHub
  ☆14Oct 1, 2021Updated 4 years ago
• HoangKien1020 / CVE-2020-11890

  View on GitHub
  CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE
  ☆62Jun 1, 2023Updated 2 years ago
• In3tinct / See-SURF

  View on GitHub
  Security tool (now AI powered 🤖) to find potential vulnerable Server Side Request Forgery (SSRF) parameters.
  ☆353Jan 29, 2026Updated 2 weeks ago
• bit4woo / Java_deserialize_vuln_lab

  View on GitHub
  Java 反序列化学习的实验代码 Java_deserialize_vuln_lab
  ☆87Nov 26, 2018Updated 7 years ago
• jakewarren / tldomains

  View on GitHub
  Tiny library to parse the subdomain, domain, and tld extension from a host string
  ☆23Apr 1, 2022Updated 3 years ago
• decay88 / Tengri_Shellcode_Loader

  View on GitHub
  Encrypted Shellcode Loader Generator
  ☆22Jan 29, 2019Updated 7 years ago
• josdoaitran / payload-for-security-testing

  View on GitHub
  List out all of payload for security testing
  ☆25May 2, 2022Updated 3 years ago
• ethicalhackingplayground / endzy

  View on GitHub
  Endpoint monitor tool
  ☆21Sep 16, 2020Updated 5 years ago
• venenof7 / VCTF-Platform

  View on GitHub
  One CTF Platform
  ☆20Dec 4, 2019Updated 6 years ago
• wdahlenburg / LogicalFuzzingEngine

  View on GitHub
  A Burpsuite extension written in Python to perform basic validation fuzzing
  ☆11Oct 7, 2022Updated 3 years ago
• mrnitesh / WSDL

  View on GitHub
  It contain google dork to find the wsdl file.
  ☆13May 27, 2020Updated 5 years ago
• ghassani / mclf-ghidra-loader

  View on GitHub
  A Mobicore Trustlet/Driver Binary Loader for Ghidra
  ☆13Jul 10, 2019Updated 6 years ago
• 0xNASSER / Lhijacking-finder

  View on GitHub
  ☆10Jan 25, 2023Updated 3 years ago
• safe6Sec / burpDevNote

  View on GitHub
  burp插件开发笔记
  ☆11Dec 26, 2021Updated 4 years ago
• mhaskar / CVE-2019-20224

  View on GitHub
  The offical exploit for Pandora v7.0NG Post-auth Remote Code Execution CVE-2019-20224
  ☆14Jan 10, 2020Updated 6 years ago
• Medicean / GenShell

  View on GitHub
  AntSword Generate Shell Plugin
  ☆12Jun 26, 2022Updated 3 years ago
• Kagami / docker_cve-2015-2925

  View on GitHub
  Docker + CVE-2015-2925 = escaping from --volume
  ☆11Jun 30, 2015Updated 10 years ago
• spaceraccoon / spring-boot-actuator-h2-rce

  View on GitHub
  Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database
  ☆107Jan 26, 2020Updated 6 years ago
• XalfiE / Bug-Bounty-Oneliners

  View on GitHub
  Oneliners curated from my experience and from the internet
  ☆23Feb 8, 2021Updated 5 years ago
• k4k4r07 / CertSubDumb

  View on GitHub
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆19May 23, 2022Updated 3 years ago
• tim124058 / ASUS-SmartHome-Exploit

  View on GitHub
  ASUS SmartHome Exploit for CVE-2019-11061 and CVE-2019-11063
  ☆23Aug 27, 2019Updated 6 years ago
• Monyer / xssee

  View on GitHub
  A js encode/decode simple tool for XSS
  ☆28Nov 27, 2019Updated 6 years ago
• eternyle / ShodanIsh

  View on GitHub
  Shodan Favicon Hash Generator By Aziz Hakim @eternyle
  ☆26May 25, 2024Updated last year
• crawl3r / PortswiggerXSS

  View on GitHub
  gathers the XSS cheatsheet payloads and creates a usable wordlist
  ☆74Jan 4, 2021Updated 5 years ago
• jiangsir404 / pbscan

  View on GitHub
  基于burpsuite headless 的代理式被动扫描系统
  ☆97Feb 10, 2020Updated 6 years ago
• bewhale / seeyon_zipfile_upload

  View on GitHub
  致远OA通过发送特殊请求获取管理员cookie，再通过文件上传接口上传webshell压缩文件，最后发送解压请求获取webshell
  ☆10Apr 11, 2021Updated 4 years ago
• xindongzhuaizhuai / awvs_script_decode

  View on GitHub
  ☆10Dec 19, 2017Updated 8 years ago