Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJAX entrypoints). Detects SQLi, XSS, IDOR, privesc, RCE. Built on php-parser-go.
☆20Jun 6, 2026Updated 2 months ago
Alternatives and similar repositories for wp-taint-scan
Users that are interested in wp-taint-scan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A proof of concept to dump Django website's source code affected by NGINX's off-by-slash alias directive misconfiguration.☆24Dec 8, 2022Updated 3 years ago
- NeXSS is a modern, self-hosted Blind XSS (Cross-Site Scripting) hunter and callback listener built with Next.js. It helps security resear…☆34Jan 14, 2026Updated 7 months ago
- The application consists of several vulnerable web applications that are integrated with Wazuh.☆22May 1, 2023Updated 3 years ago
- A Byte of Python book☆12May 4, 2018Updated 8 years ago
- DursVuln - Nmap Scripting Engine (NSE)☆21Jul 16, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Kotlin parser in pure Python.☆13Jul 21, 2021Updated 5 years ago
- PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)☆39Dec 12, 2018Updated 7 years ago
- rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.☆10Apr 13, 2019Updated 7 years ago
- A tool to encode and decode content as whitespace☆20Sep 24, 2023Updated 2 years ago
- ☆23Jun 28, 2025Updated last year
- IrisCTF 2023 challenges.☆16Jan 23, 2023Updated 3 years ago
- Moodle (< 3.6.2, < 3.5.4, < 3.4.7, < 3.1.16) XSS PoC for Privilege Escalation (Student to Admin)☆17Apr 29, 2021Updated 5 years ago
- DursGo - The Go-Powered Web Application Scanner - With AI-Powered Analysis☆71Apr 21, 2026Updated 4 months ago
- Repository of CTF challenges for The Cyber Jawara International 2024☆18Aug 13, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- E2E encrypted ephemeral messaging app. Share secrets securely without setup. Built with Next.js, Soketi, and OpenPGP.js. Self-hostable.☆12Sep 16, 2024Updated last year
- YoloBot is a NodeJS server that parses incoming TradingView.com alerts and responds to them by placing buy or sell orders on the Binance …☆10Dec 13, 2022Updated 3 years ago
- IRIS Module to Run Any Velociraptor Artifact☆16Mar 31, 2023Updated 3 years ago
- In Detail Methodology of How I perform Web Pentesting☆10Oct 18, 2025Updated 10 months ago
- Writeup Template. Feel free to replicate but please give me credit!☆13Nov 7, 2025Updated 9 months ago
- Membuat Aplikasi Hitung Ongkos Kirim dengan API Raja Ongkir☆12Mar 5, 2021Updated 5 years ago
- AWS CDK Construct libraries☆16Jan 5, 2023Updated 3 years ago
- ☆10Feb 8, 2024Updated 2 years ago
- FileFetcher is a Python tool that extracts and filters URLs from archived Wayback Machine data based on file types like .pdf, .zip, .sql,…☆20Jan 16, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Billing for openstack☆15Nov 22, 2022Updated 3 years ago
- Caido's passive workflow to find potential leaked secrets, PII, and sensitive fields.☆29Jan 13, 2025Updated last year
- URLs for Exploit (UFX) is a powerful, modular, and extensible tool designed for security researchers, penetration testers, and developers…☆17Jan 30, 2025Updated last year
- PeekFx allows loading and decompilation of groups of .NET framework assemblies.☆30Feb 1, 2023Updated 3 years ago
- Compilation of my CTFs Write Up and my cheat sheet.☆16Aug 8, 2026Updated 2 weeks ago
- Scheduling app to search for free block fo time on your Google Calendar (using Flask).☆16Jun 24, 2013Updated 13 years ago
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆19Jun 22, 2026Updated 2 months ago
- A modification I've made to Vesta Control Panel (http://vestacp.com/) which implements Jailkit chroot. With this modification you're able…☆12Dec 7, 2016Updated 9 years ago
- The "code" for squarectf.com☆13Jan 22, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- CTFs solve scripts☆19Jan 9, 2026Updated 7 months ago
- ☆17Jun 11, 2022Updated 4 years ago
- Craft engaging XSS challenges effortlessly with CTF-XSS-BOT. This template simplifies setting up an environment for Capture The Flag comp…☆46Aug 7, 2025Updated last year
- Saiyanfit AI - AI powered personal fitness trainer and dietitian☆12May 12, 2023Updated 3 years ago
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 3 years ago
- Bash script that reports custom metric data about PostgreSQL(RDS) performance to Amazon CloudWatch☆21Jan 28, 2021Updated 5 years ago
- Advent Calendar CTF 2014☆10Nov 4, 2015Updated 10 years ago