Burp extension to detect alias traversal via NGINX misconfiguration at scale.
☆53Dec 3, 2021Updated 4 years ago
Alternatives and similar repositories for nginx-alias-traversal
Users that are interested in nginx-alias-traversal are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- gorobots - robots.txt recon & path discovery in Go. Structured parsing, 29-category sensitivity classification, concurrent path probing, …☆19Apr 10, 2026Updated 6 months ago
- Extract parameters/paths from urls☆17Aug 2, 2020Updated 6 years ago
- Customizable Security Scanner written in Go☆16Jul 6, 2016Updated 10 years ago
- Installs And Executes Shellcode☆12Jul 26, 2015Updated 11 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This repo contains Axis web shells☆18Jun 15, 2019Updated 7 years ago
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 4 years ago
- An AntSword's plugin to scan webshell☆17Sep 2, 2019Updated 7 years ago
- Tiny library to parse the subdomain, domain, and tld extension from a host string☆23Apr 1, 2022Updated 4 years ago
- LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。☆14Jul 7, 2019Updated 7 years ago
- C# DCOM Execution☆17Aug 4, 2019Updated 7 years ago
- Collection of different exploitation scenarios of JWT.☆21Jul 23, 2021Updated 5 years ago
- CVE-2019-9580 - StackStorm: exploiting CORS misconfiguration (null origin) to gain RCE☆31Mar 13, 2019Updated 7 years ago
- CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe☆16Jul 6, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Shellcode Loader Engine for Windows☆28Jan 29, 2017Updated 9 years ago
- CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE☆62Jun 1, 2023Updated 3 years ago
- List out all of payload for security testing☆24May 2, 2022Updated 4 years ago
- ☆11Jun 19, 2024Updated 2 years ago
- Weblogic Unrestricted File Upload☆54Apr 17, 2019Updated 7 years ago
- HTTP parameter discovery suite.☆93Apr 16, 2020Updated 6 years ago
- Burp Extension to auto renew OAuth bearer tokens. Can be adapted for any authorisation headers required for app testing☆11Aug 23, 2022Updated 4 years ago
- One liner regex match to search inside JS files, using curl and grep!☆28Dec 26, 2021Updated 4 years ago
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆74Jan 4, 2021Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- Java 反序列化学习的实验代码 Java_deserialize_vuln_lab☆86Nov 26, 2018Updated 7 years ago
- 搜索几个网站的云盘资源，并过滤到失效链接，最后不保证资源的有效性☆20Jun 25, 2018Updated 8 years ago
- Encrypted Shellcode Loader Generator☆22Jan 29, 2019Updated 7 years ago
- One CTF Platform☆20Dec 4, 2019Updated 6 years ago
- Day by day Lots of Newbie Come into bug Bounty They ask Social Site about Bug Bounty Site, So That's why I open My Hunted All Site.☆32Sep 20, 2020Updated 6 years ago
- Shodan Favicon Hash Generator By Aziz Hakim @eternyle☆26May 25, 2024Updated 2 years ago
- This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.☆22Sep 14, 2023Updated 3 years ago
- A docker image which will enumerate, sort, unique and resolve the results of various subdomains enumeration tools.☆71Jul 19, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Get all possible href | src | url from target url or domain☆40Aug 5, 2020Updated 6 years ago
- fastjson-1.2.61-RCE☆33Sep 26, 2019Updated 7 years ago
- Docker + CVE-2015-2925 = escaping from --volume☆11Jun 30, 2015Updated 11 years ago
- 基于burpsuite headless 的代理式被动扫描系统☆96Feb 10, 2020Updated 6 years ago
- X-Forwarded-For [403 forbidden] enumeration☆101May 3, 2024Updated 2 years ago
- ☆10Dec 19, 2017Updated 8 years ago
- Oneliners curated from my experience and from the internet☆22Feb 8, 2021Updated 5 years ago