Go static taint-analysis engine that finds vulnerabilities in WordPress plugins — WordPress-aware (capability tiers, nonce≠authz, REST/AJAX entrypoints). Detects SQLi, XSS, IDOR, privesc, RCE. Built on php-parser-go.
☆21Jun 6, 2026Updated 4 months ago
Alternatives and similar repositories for wp-taint-scan
Users that are interested in wp-taint-scan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A proof of concept to dump Django website's source code affected by NGINX's off-by-slash alias directive misconfiguration.☆24Dec 8, 2022Updated 3 years ago
- NeXSS is a modern, self-hosted Blind XSS (Cross-Site Scripting) hunter and callback listener built with Next.js. It helps security resear…☆35Jan 14, 2026Updated 9 months ago
- A Byte of Python book☆12May 4, 2018Updated 8 years ago
- DursVuln - Nmap Scripting Engine (NSE)☆23Jul 16, 2025Updated last year
- Palantir Dashboard Demo☆16Mar 10, 2026Updated 7 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)☆39Dec 12, 2018Updated 7 years ago
- Simple XSS vulnerability checker tool very useful with xsschecker.☆28Nov 21, 2025Updated 11 months ago
- Moodle (< 3.6.2, < 3.5.4, < 3.4.7, < 3.1.16) XSS PoC for Privilege Escalation (Student to Admin)☆17Apr 29, 2021Updated 5 years ago
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 11 months ago
- CTF challenges WriteUp☆14Jun 27, 2022Updated 4 years ago
- rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.☆10Apr 13, 2019Updated 7 years ago
- WayAI — Wayback & Common Crawl Recon (CLI + Web GUI)☆14Dec 28, 2025Updated 9 months ago
- Repository of CTF challenges for The Cyber Jawara International 2024☆18Aug 13, 2026Updated 2 months ago
- A fast tool to detect CORS misconfigurations in web applications.☆19Sep 5, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DursGo - The Go-Powered Web Application Scanner - With AI-Powered Analysis☆74Apr 21, 2026Updated 6 months ago
- ☆23Jun 28, 2025Updated last year
- A simple code to decrypt global-metadata.dat for Mobile Legends: Bang Bang☆16Jul 4, 2022Updated 4 years ago
- A tool to encode and decode content as whitespace☆20Sep 24, 2023Updated 3 years ago
- HackToday is annual ctf competition held by Cyber Security IPB☆17Mar 19, 2021Updated 5 years ago
- E2E encrypted ephemeral messaging app. Share secrets securely without setup. Built with Next.js, Soketi, and OpenPGP.js. Self-hostable.☆12Sep 16, 2024Updated 2 years ago
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆44Apr 12, 2026Updated 6 months ago
- Caido's passive workflow to find potential leaked secrets, PII, and sensitive fields.☆28Jan 13, 2025Updated last year
- my dotfiles☆13Oct 5, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆17Aug 10, 2026Updated 2 months ago
- In Detail Methodology of How I perform Web Pentesting☆10Oct 18, 2025Updated last year
- ☆11Feb 8, 2024Updated 2 years ago
- IrisCTF 2023 challenges.☆16Jan 23, 2023Updated 3 years ago
- AI exploit simulation and continuous security pipeline for LLM apps and AI agents☆16Mar 16, 2026Updated 7 months ago
- A CloudFlare Style Cyberpanel Theme☆10Feb 29, 2024Updated 2 years ago
- Linux kernel LPE via an io_uring zerocopy page-refcount underflow over AF_VSOCK☆44Aug 14, 2026Updated 2 months ago
- Burp Suite extension for passive JS reconnaissance - detects 1,600+ secret patterns, API keys, endpoints, and security misconfigurations …☆27Apr 23, 2026Updated 6 months ago
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Writeup Template. Feel free to replicate but please give me credit!☆12Nov 7, 2025Updated 11 months ago
- Membuat Aplikasi Hitung Ongkos Kirim dengan API Raja Ongkir☆12Mar 5, 2021Updated 5 years ago
- URLs for Exploit (UFX) is a powerful, modular, and extensible tool designed for security researchers, penetration testers, and developers…☆17Jan 30, 2025Updated last year
- FileFetcher is a Python tool that extracts and filters URLs from archived Wayback Machine data based on file types like .pdf, .zip, .sql,…☆20Jan 16, 2025Updated last year
- A simple tool to fix corrupted png images by bruteforcing possible image dimensions in the IHDR chunk.☆20Oct 6, 2023Updated 3 years ago
- Database kode dan nama kewilayah untuk Kemendagri update 2021☆11Dec 15, 2021Updated 4 years ago
- The "code" for squarectf.com☆13Jan 22, 2025Updated last year