detectify / vulnerable-nginxLinks
An intentionally vulnerable NGINX setup
☆241Updated 4 years ago
Alternatives and similar repositories for vulnerable-nginx
Users that are interested in vulnerable-nginx are comparing it to the libraries listed below
Sorting:
- ☆545Updated 4 months ago
- NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.☆387Updated 3 years ago
- Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"☆207Updated 2 years ago
- Web dashboard for Interactsh client☆226Updated 2 months ago
- Content-Type Research☆625Updated last month
- ☆180Updated last month
- Client Side Prototype Pollution Scanner☆519Updated 2 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆373Updated 11 months ago
- A tool to test security of json web token☆275Updated 4 years ago
- Security Testing Scripts for JWT☆316Updated 3 years ago
- navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities☆71Updated 2 years ago
- This repo contains all the injections mentioned in my talk and enumerators.☆130Updated last year
- Http request smuggling vulnerability scanner☆228Updated 2 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆422Updated 9 months ago
- Burpsuite plugin for Interact.sh☆225Updated last year
- Simple DNS Rebinding Service☆674Updated 5 years ago
- Awesome information for WebSockets security research☆276Updated 3 years ago
- XS-Leaks Wiki☆166Updated 2 months ago
- This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…☆337Updated 4 years ago
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆742Updated 3 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆174Updated 9 months ago
- Automated learning of regexes for DNS discovery☆371Updated 2 years ago
- A Security Tool for Enumerating WebSockets☆360Updated 3 years ago
- Predict Mongo ObjectIds☆144Updated 7 years ago
- Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.☆128Updated 2 years ago
- Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.☆263Updated 11 months ago
- Scrape domain names from SSL certificates of arbitrary hosts☆657Updated last year
- Vulnerability Scan with Nuclei☆259Updated 8 months ago
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations☆389Updated 2 years ago
- Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.☆107Updated 3 years ago