detectify / vulnerable-nginxLinks
An intentionally vulnerable NGINX setup
☆243Updated 5 years ago
Alternatives and similar repositories for vulnerable-nginx
Users that are interested in vulnerable-nginx are comparing it to the libraries listed below
Sorting:
- ☆557Updated 8 months ago
- ☆185Updated 6 months ago
- Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"☆210Updated 2 years ago
- NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.☆400Updated 4 years ago
- Web dashboard for Interactsh client☆236Updated this week
- Security Testing Scripts for JWT☆327Updated 3 years ago
- This repo contains all the injections mentioned in my talk and enumerators.☆134Updated 2 years ago
- Client Side Prototype Pollution Scanner☆522Updated 3 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆387Updated last year
- This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…☆345Updated 4 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆174Updated last year
- DNS rebinding toolkit☆254Updated 2 years ago
- Exploits targeting Symfony☆211Updated last year
- Http request smuggling vulnerability scanner☆228Updated 3 years ago
- XS-Leaks Wiki☆171Updated 6 months ago
- Awesome information for WebSockets security research☆297Updated 3 years ago
- Content-Type Research☆648Updated 5 months ago
- Predict Mongo ObjectIds☆148Updated 7 years ago
- Client-Side Prototype Pollution Tools☆85Updated 4 years ago
- A python based minimal DNS server to test/verify DNS rebinding attacks☆69Updated 2 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆425Updated 2 weeks ago
- navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities☆73Updated 2 years ago
- Automated learning of regexes for DNS discovery☆382Updated 2 years ago
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations☆401Updated 3 years ago
- This is the data that powers the PortSwigger URL validation bypass cheat sheet.☆58Updated 2 months ago
- Black box fuzzer for web applications☆436Updated 5 months ago
- Rust-based high performance domain permutation generator.☆296Updated 2 years ago
- List of periodically validated public DNS resolvers☆236Updated this week
- Tools to assess the DNS security of web applications☆128Updated 3 years ago
- ☆172Updated 4 years ago