dub-flow/path-normalization-bypasses external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

dub-flow/path-normalization-bypasses

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/dub-flow/path-normalization-bypasses)

Close

dub-flow / path-normalization-bypassesView on GitHubMore

• External links
• Readme badge

This repo contains labs for bypassing path normalization issues involving Nginx and e.g. Flask and Node.js

☆15May 16, 2024Updated 2 years ago

Alternatives and similar repositories for path-normalization-bypasses

Users that are interested in path-normalization-bypasses are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• X1r0z / ClassNameObfuscator

  View on GitHub
  基于多种策略, 对已有 JAR 包中的全限定类名进行变换, 无限生成高度相似的虚假类名
  ☆20Jul 30, 2025Updated last year
• kezibei / php-filter-iconv

  View on GitHub
  ☆97Aug 28, 2026Updated 3 weeks ago
• Aecous / PHP-Unseriallize-TaintAnalysis

  View on GitHub
  ☆23Apr 4, 2025Updated last year
• Abs1n7he / PermTool

  View on GitHub
  黑盒越权测试工具
  ☆15Mar 13, 2025Updated last year
• Tr0e / MobileTools

  View on GitHub
  Android渗透测试脚本, by Tr0e.
  ☆29Jun 19, 2024Updated 2 years ago
• Open source password manager - Proton Pass • Ad
  Securely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
• d3mondev / stripcol

  View on GitHub
  A command line tool that reads from stdin and strips ANSI color codes from the input.
  ☆10Feb 11, 2023Updated 3 years ago
• Tas9er / ExprInject

  View on GitHub
  ExprInject / Java表达式注入自动化扫描 / Code By:Tas9er
  ☆41Sep 11, 2025Updated last year
• adrgs / oopquiz

  View on GitHub
  https://oopquiz.fly.dev
  ☆11Oct 31, 2023Updated 2 years ago
• wuuconix / SQL-Blind-Injection-Auto

  View on GitHub
  自己写的SQL盲注自动化脚本
  ☆23Aug 28, 2021Updated 5 years ago
• TryA9ain / noPac

  View on GitHub
  CVE-2021-42287/CVE-2021-42278 Exploiter
  ☆15Jan 12, 2023Updated 3 years ago
• j3ssie / str-replace

  View on GitHub
  Simple tools to handle string and generate subdomain permutations
  ☆15Jun 8, 2022Updated 4 years ago
• CRTified / discrete-log

  View on GitHub
  Practical Implementation of the Maurer Reduction
  ☆11Jul 13, 2023Updated 3 years ago
• 1oid / AnyPocsYamlParser

  View on GitHub
  Many yaml scanner plugin parser [nuclei-template, xray-poc, ez-poc] - for Python
  ☆14Mar 27, 2022Updated 4 years ago
• ProbiusOfficial / Steg-labs

  View on GitHub
  【Hello-CTF labs】一个想要帮你搞定CTF中所有隐写技术的靶场，让知识更体系化一点。
  ☆21Jul 16, 2024Updated 2 years ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• X1cT34m / NCTF2024

  View on GitHub
  NCTF 2024 challenges and writeups
  ☆10Apr 11, 2025Updated last year
• libmifan / AM0N-Eye

  View on GitHub
  ☆16Mar 26, 2023Updated 3 years ago
• carlospolop / easy_stegoCTF

  View on GitHub
  Brutteforce for stego CTFs
  ☆17Nov 2, 2022Updated 3 years ago
• husseinphp / Hide-Search-Result

  View on GitHub
  ☆14Nov 8, 2024Updated last year
• CRONUS-Security / flow_analysis

  View on GitHub
  ☆12Oct 31, 2024Updated last year
• D-3CTF / D3CTF-2025-Official-Writeup

  View on GitHub
  Official writeup for D^3CTF 2025
  ☆19Jun 2, 2025Updated last year
• Y0n3er / CTF-Java

  View on GitHub
  ☆53Dec 8, 2025Updated 9 months ago
• suizhibo / MemShellKiller

  View on GitHub
  基于Agent技术实现的Java内存马查杀、防护工具。
  ☆94Jul 25, 2024Updated 2 years ago
• yuanLink / PwnWAF

  View on GitHub
  pwn log tools for AWD
  ☆12May 29, 2018Updated 8 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• asciidisco / webusb-workshop

  View on GitHub
  Learn how to steer POS printers with WebUSB
  ☆10Mar 14, 2019Updated 7 years ago
• yueshenyuan / JS-share

  View on GitHub
  一款支持微信和QQ、UC手机浏览器的分享工具，可以自定义标题、链接、icon等
  ☆12Apr 19, 2018Updated 8 years ago
• SecureBrain / idaflirt-detector

  View on GitHub
  idaflirt-detector is Python scripts and IDA FLIRT signatures to detect statically linked libraries from stripped ELF file.
  ☆12May 19, 2022Updated 4 years ago
• hpy / permDNS

  View on GitHub
  A rewrite of the popular altDNS subdomain tool by @infosec-au
  ☆12Feb 28, 2019Updated 7 years ago
• aicoa / k8spentool-go

  View on GitHub
  将传统的k8s攻击手法进行整合，融入cdk的相关exp，接入llm并提供attack接口完成k8s自动化渗透。
  ☆31Jul 12, 2026Updated 2 months ago
• Bamboo-fly / Android-Vulnerability-Analysis

  View on GitHub
  基于JavaFX框架做的一款安卓漏洞分析桌面软件，采用了反编译技术与静态分析技术，上传apk包即可分析APP可能包含的风险。
  ☆14Nov 23, 2022Updated 3 years ago
• kankburhan / gampung

  View on GitHub
  Gampung tools for find nuclei template from github
  ☆12Sep 6, 2023Updated 3 years ago
• InfoSecREDD / Termux-Helper-Script

  View on GitHub
  This is a personal script used to link Kali Nethunter Chroot/Termux to the Proxmark3 and small patch for DriveDroid on Android 12.
  ☆10Jan 24, 2022Updated 4 years ago
• vaishalinagori / AutoCrypt-Burp-Extension

  View on GitHub
  ☆13Oct 24, 2024Updated last year
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• wgpsec / RekSai

  View on GitHub
  RekSai 多个工具的功能结合起来，然后自动信息收集，保存结果
  ☆11Nov 10, 2020Updated 5 years ago
• bp0lr / altdns

  View on GitHub
  Generates permutations, alterations and mutations of subdomains. Auto Resolve what we find.
  ☆11Dec 8, 2020Updated 5 years ago
• iSafeBlue / secfile

  View on GitHub
  《安全档案》信息安全技术期刊
  ☆11Mar 30, 2019Updated 7 years ago
• Vozec / CTFlagger

  View on GitHub
  This website is used to automatically scan files during CTF.
  ☆14May 31, 2023Updated 3 years ago
• ThioJoe / BasicStabilityAPI-GUI

  View on GitHub
  A basic GUI for interacting with the Stability AI API for Stable Diffusion 3
  ☆14Apr 22, 2024Updated 2 years ago
• benjamin-shi / AIMHanXinCode.Net

  View on GitHub
  AIM International Technical Specification - Han Xin Code Encoding Library for .Net
  ☆12May 9, 2019Updated 7 years ago
• twowb / ztor

  View on GitHub
  防溯源利器之ztor代理（自定义秒级更换IP）
  ☆12Feb 23, 2024Updated 2 years ago