alebeta90 / behindflareLinks
This tool was created as a Proof of Concept to reveal the threats related to web service misconfiguration using CloudFlare as reverse proxy and WAF
☆14Updated 2 years ago
Alternatives and similar repositories for behindflare
Users that are interested in behindflare are comparing it to the libraries listed below
Sorting:
- A program to map out SPF and DKIM records for a large number of domains☆39Updated 10 years ago
- Clickjacking PoC Generator☆35Updated 5 years ago
- Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.☆58Updated 5 years ago
- Default plugins for Jaeles Scanner☆35Updated 5 years ago
- It becomes the extension of Burp suite. The cookie set by the BipIP server may include a private IP, which is an extension to detect tha…☆16Updated last month
- Create wordlists from source codes files/directories for enumeration☆30Updated 2 years ago
- The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.☆77Updated 5 years ago
- Data exfiltration utility for testing detection capabilities☆57Updated 3 years ago
- XXE Injection Payloads☆28Updated 6 years ago
- String or worldlist encoder for use in fuzzing or web application testing☆19Updated 6 years ago
- A multi-processed, multi-threaded scanner to discover web directories on multiple URLs.☆21Updated 6 years ago
- Unauthenticated RCE at Woody Ad Snippets / CVE-2019-15858 (PoC)☆32Updated 2 years ago
- fast, zero config web endpoint change monitor☆43Updated 5 years ago
- Multithreaded Padding Oracle Attack on Oracle OAM (CVE-2018-2879)☆25Updated 6 years ago
- All the information provided on this site is for educational purposes only.☆18Updated last year
- qsinject (Query String Inject) is a tool that allows you to quickly substitute query string values with regex matches, one-at-a-time.☆30Updated 5 years ago
- ☆46Updated 4 years ago
- Anvil Secure's Burp extension for signing AWS requests with SigV4☆21Updated 4 months ago
- Use regular expressions to get sensitive information from a given repository (GitHub, pip or npm).☆37Updated 6 years ago
- asnap aims to render recon phase easier by providing updated data about which companies owns which ipv4 or ipv6 addresses and allows the …☆25Updated 5 years ago
- A JavaScript components vulnerability scanner, based on RetireJS☆37Updated 5 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆32Updated 7 years ago
- Deploy a Private Burpsuite Collaborator using boto3 Python Library☆58Updated 5 years ago
- Database to store previously found subdomains☆66Updated 3 months ago
- A Burp Extender plugin that will allow you to tamper with requests containing compressed, serialized java objects.☆24Updated 6 years ago
- This is the Go Server that relays all HTTP requests and responses between clients.☆28Updated 2 years ago
- Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)☆48Updated 7 years ago
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆47Updated 6 years ago
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆37Updated 5 years ago
- An Extended, Modulair, Host Discovery Framework☆42Updated 6 years ago