PushpenderIndia / Log4jScanner
Log4jScanner is a Log4j Related CVEs Scanner, Designed to Help Penetration Testers to Perform Black Box Testing on given subdomains.
☆39Updated 3 years ago
Alternatives and similar repositories for Log4jScanner:
Users that are interested in Log4jScanner are comparing it to the libraries listed below
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆49Updated 2 years ago
- ☆42Updated 3 years ago
- ☆36Updated 2 years ago
- Community curated list of templates for the erebus engine to find security vulnerabilities.☆16Updated 3 years ago
- Authorization-Nuclei-Templates☆38Updated 5 months ago
- A Complete SSRF (Server Side Request Forgery) Scanner.☆31Updated last month
- ☆43Updated last year
- PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]☆53Updated 2 years ago
- A repo for tools, utils, and wrappers that are to small to put in their own repo.☆23Updated last year
- This repository contains proof of concept for zero days and CVEs that were found by Omar Hashem through Security Research☆44Updated 2 years ago
- [CVE-2024-4956] Nexus Repository Manager 3 Unauthenticated Path Traversal Bulk Scanner☆14Updated 5 months ago
- XSS Finder Via SSTI☆54Updated last year
- About Recon Tools,Methodology and writeups☆18Updated last year
- ☆37Updated last year
- Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.☆33Updated 3 years ago
- Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability☆57Updated last year
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆44Updated last year
- A FireBase DataBase TakeOver Tool along with POC Generator☆33Updated 3 years ago
- This tool allows you to find ssti vulnerability with ease!☆19Updated 2 years ago
- script python to check url list via cookies and Authorization☆19Updated 2 years ago
- Write-ups of All types Bugs☆19Updated 2 years ago
- This includes all the templates of nuclei collected from different sources☆17Updated 2 years ago
- Passively check for XSS character encodings☆18Updated last year
- Basic Bash Script to scrape all subdomains from crtsh in a single run☆18Updated 2 years ago
- SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.☆38Updated 3 years ago
- ☆25Updated 4 years ago
- Some of the gf patterns which i use☆40Updated 3 years ago
- A solid recon tool I use personally.☆30Updated last year
- Extract endpoints marked as disallow in robots files to generate wordlists.☆56Updated 3 years ago
- Striping CDN IPs from a list of IP Addresses☆75Updated 2 years ago