allanlw / svg-cheatsheet

Related projects: ⓘ

• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆772Updated 2 years ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆601Updated 6 months ago
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆735Updated last year
• filedescriptor / untrusted-types
  ☆647Updated 2 years ago
• DiogoMRSilva / websitesVulnerableToSSTI
  Simple websites vulnerable to Server Side Template Injections(SSTI)
  ☆373Updated last year
• incredibleindishell / SSRF_Vulnerable_Lab
  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  ☆663Updated last year
• chrislockard / api_wordlist
  A wordlist of API names for web application assessments
  ☆725Updated last year
• fransr / postMessage-tracker
  A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
  ☆1,029Updated 7 months ago
• msrkp / PPScan
  Client Side Prototype Pollution Scanner
  ☆507Updated 2 years ago
• 1ndianl33t / Gf-Patterns
  GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
  ☆1,185Updated this week
• synacktiv / HopLa
  HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite
  ☆701Updated 3 years ago
• zigoo0 / JSONBee
  A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
  ☆658Updated 4 months ago
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆571Updated 2 years ago
• CoreyD97 / BurpCustomizer
  Because just a dark theme wasn't enough!
  ☆546Updated 2 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆502Updated 7 months ago
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆720Updated 3 years ago
• ghsec / webHunt
  Web App bug hunting
  ☆549Updated 2 months ago
• tomnomnom / qsreplace
  Accept URLs on stdin, replace all query string values with a user-supplied value
  ☆745Updated last year
• elkokc / reflector
  Burp plugin able to find reflected XSS on page in real-time while browsing on site
  ☆1,114Updated 3 years ago
• neex / http2smugl
  ☆527Updated 9 months ago
• KathanP19 / JSFScan.sh
  Automation for javascript recon in bug bounty.
  ☆886Updated last year
• zricethezav / h1domains
  HackerOne "in scope" domains
  ☆394Updated this week
• ayoubfathi / leaky-paths
  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…
  ☆925Updated 2 months ago
• s0md3v / uro
  declutters url lists for crawling/pentesting
  ☆1,114Updated 3 months ago
• payloadbox / open-redirect-payload-list
  🎯 Open Redirect Payload List
  ☆509Updated 2 months ago
• AlephNullSK / dnsgen
  Generates combination of domain names from the provided input.
  ☆886Updated 2 months ago
• xm1k3 / cent
  Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…
  ☆853Updated 3 months ago
• honoki / bbrf-client
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆608Updated 5 months ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆479Updated 8 months ago
• devanshbatham / FavFreak
  Making Favicon.ico based Recon Great again !
  ☆1,111Updated last year