psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & web file upload implementations allowing to write files into the webroot (aka document root). The "blind" aspect is the key here and is inherent to dynamic testing usually conducted with no access to the source …
☆19Jun 28, 2018Updated 8 years ago
Alternatives and similar repositories for psycho-path
Users that are interested in psycho-path are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- stdin writes to slack☆13Feb 8, 2020Updated 6 years ago
- LFI/RFI scanner by Iman Karim (fimap.dev@gmail.com)☆10Jul 3, 2015Updated 11 years ago
- Notes and helper scripts/files/etc from when I passed my OSCP☆19Sep 17, 2019Updated 7 years ago
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- Misc. Public Reports of Penetration Testing and Security Audits.☆37Jan 8, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- Alias for storing ffuf results☆20May 23, 2020Updated 6 years ago
- Pulse SSL VPN Arbitrary File Read burp extension☆25Sep 24, 2019Updated 7 years ago
- ☆18Oct 30, 2022Updated 3 years ago
- Tool for checking reflecting Parameters in a URL.☆10Aug 31, 2020Updated 6 years ago
- GetSimple CMS Custom JS Plugin Exploit RCE Chain☆11Mar 8, 2023Updated 3 years ago
- The aim of the project is to develop intentionally vulnerable source code in various languages.☆16Mar 3, 2026Updated 6 months ago
- ☆15Sep 24, 2015Updated 11 years ago
- Python Reverse Shell Builder with some advanced functionalities☆10Feb 16, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆20Aug 3, 2022Updated 4 years ago
- ☆20Aug 15, 2020Updated 6 years ago
- Cross-assemblers, cross-binutils and cross-compilers needed for rebuilding the UPX stubs☆18Jan 8, 2026Updated 8 months ago
- Facebook Bug Bounties☆106Feb 24, 2021Updated 5 years ago
- Accompanying material needed for the workshop☆11Jun 14, 2023Updated 3 years ago
- ⚡ Golang library for quick make pentest tools☆16Apr 7, 2025Updated last year
- Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests☆21May 1, 2017Updated 9 years ago
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆38Nov 8, 2017Updated 8 years ago
- ☆53Aug 10, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- ☆11Oct 7, 2022Updated 3 years ago
- WAScan ((W)eb (A)pplication (Scan)ner) is a Open Source web application security scanner. It is designed to find various vulnerabilities …☆26May 7, 2020Updated 6 years ago
- ☆96Oct 1, 2021Updated 5 years ago
- Simple command shell collections☆35Mar 7, 2021Updated 5 years ago
- ShiftCrops pwn tool☆15Dec 11, 2016Updated 9 years ago
- ☆125Mar 27, 2017Updated 9 years ago
- ☆13Mar 23, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- The Ultimate File Upload Bypass Generator☆14Nov 24, 2025Updated 10 months ago
- Collection of content discovery wordlists in one wordlist.☆37Jan 18, 2022Updated 4 years ago
- Learn what is NoSQL injection and how to find them ?☆10Jul 22, 2021Updated 5 years ago
- for python test script☆32May 8, 2016Updated 10 years ago
- Reports of cyber threat intelligence☆14Feb 15, 2023Updated 3 years ago
- S2-061 CVE-2020-17530☆29Dec 22, 2020Updated 5 years ago
- A Burp extension to Fuzz URLs for HTTP parser inconsistencies☆16Jan 9, 2024Updated 2 years ago