Fuzzing for LFI using Burpsuite
☆70Oct 4, 2016Updated 10 years ago
Alternatives and similar repositories for Burp-LFI-tests
Users that are interested in Burp-LFI-tests are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 4 years ago
- Burp Suite extension to help make Graphql request more readable☆29Dec 7, 2017Updated 8 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆63Apr 17, 2020Updated 6 years ago
- Burp Suite Extension to monitor new scope☆198Mar 31, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.☆38Nov 21, 2025Updated 11 months ago
- This is a Burpsuite plugin built to enable you to import your directory bruteforcing results into burp for easy viewing later. This is an…☆36Mar 1, 2023Updated 3 years ago
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆160Jul 10, 2025Updated last year
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆50Feb 27, 2019Updated 7 years ago
- A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status☆87Oct 29, 2020Updated 6 years ago
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- JWT Fuzzer for BurpSuite. Adds an Intruder hook for on-the-fly JWT fuzzing.☆100Jul 29, 2019Updated 7 years ago
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- A tool to bruteforce nameservers when working with subdomain delegations to AWS.☆58Aug 22, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tool that turns the authoritative nameservers of DNS providers to resolvers and resolves the target domain list. Please think of this a…☆24Sep 19, 2019Updated 7 years ago
- A CLI that utilizes Okta IdP via SAML to acquire temporary AWS credentials☆10Jun 30, 2021Updated 5 years ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆122May 12, 2026Updated 5 months ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Sep 29, 2026Updated last month
- Smart ssrf scanner using different methods like parameter brute forcing in post and get...☆273Feb 11, 2021Updated 5 years ago
- A fast http and https prober, to check which URLs are alive☆66Aug 5, 2019Updated 7 years ago
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- ☆31Apr 6, 2021Updated 5 years ago
- burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz☆61Dec 4, 2018Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tool for searching a Git repository for interesting content☆107Dec 18, 2023Updated 2 years ago
- X-Forwarded-For [403 forbidden] enumeration☆101May 3, 2024Updated 2 years ago
- ☆248Jun 6, 2018Updated 8 years ago
- ☆15May 6, 2023Updated 3 years ago
- Burp Suite extension to easily export sub domains☆45Nov 29, 2019Updated 6 years ago
- a .js scanner, built in php. designed to scrape urls and other info☆228Aug 22, 2017Updated 9 years ago
- Repo of useful scripts☆103Jun 30, 2020Updated 6 years ago
- A simple SSRF-testing sheriff written in Go☆343Oct 31, 2024Updated 2 years ago
- burpsuite extension for check and extract sensitive request parameter☆117Nov 29, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆17May 3, 2021Updated 5 years ago
- Proof of concept code for client-side vulnerabilities☆17Mar 14, 2019Updated 7 years ago
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Burp Suite extension to passively scan for applications revealing server error messages☆65Dec 15, 2023Updated 2 years ago
- There is my vuln POC and EXP. Some of POC were collected, most of POC and EXP were written by myself.☆13May 28, 2022Updated 4 years ago
- vulnerable single sign on☆155Aug 1, 2024Updated 2 years ago