dub-flow/path-normalization-bypasses external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

dub-flow/path-normalization-bypasses

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/dub-flow/path-normalization-bypasses)

Close

dub-flow / path-normalization-bypassesView on GitHubMore

• External links
• Readme badge

This repo contains labs for bypassing path normalization issues involving Nginx and e.g. Flask and Node.js

☆15May 16, 2024Updated 2 years ago

Alternatives and similar repositories for path-normalization-bypasses

Users that are interested in path-normalization-bypasses are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• X1r0z / ClassNameObfuscator

  View on GitHub
  基于多种策略, 对已有 JAR 包中的全限定类名进行变换, 无限生成高度相似的虚假类名
  ☆20Jul 30, 2025Updated last year
• kezibei / php-filter-iconv

  View on GitHub
  ☆97Aug 28, 2026Updated last month
• Aecous / PHP-Unseriallize-TaintAnalysis

  View on GitHub
  ☆23Apr 4, 2025Updated last year
• datouo / HackPhpinfo

  View on GitHub
  一款基于正则匹配的phpinfo信息收集工具
  ☆19Jan 20, 2023Updated 3 years ago
• Tr0e / MobileTools

  View on GitHub
  Android渗透测试脚本, by Tr0e.
  ☆29Jun 19, 2024Updated 2 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• d3mondev / stripcol

  View on GitHub
  A command line tool that reads from stdin and strips ANSI color codes from the input.
  ☆10Feb 11, 2023Updated 3 years ago
• Tas9er / ExprInject

  View on GitHub
  ExprInject / Java表达式注入自动化扫描 / Code By:Tas9er
  ☆41Sep 11, 2025Updated last year
• adrgs / oopquiz

  View on GitHub
  https://oopquiz.fly.dev
  ☆11Oct 31, 2023Updated 2 years ago
• TryA9ain / noPac

  View on GitHub
  CVE-2021-42287/CVE-2021-42278 Exploiter
  ☆15Jan 12, 2023Updated 3 years ago
• j3ssie / str-replace

  View on GitHub
  Simple tools to handle string and generate subdomain permutations
  ☆15Jun 8, 2022Updated 4 years ago
• CRTified / discrete-log

  View on GitHub
  Practical Implementation of the Maurer Reduction
  ☆11Jul 13, 2023Updated 3 years ago
• 1oid / AnyPocsYamlParser

  View on GitHub
  Many yaml scanner plugin parser [nuclei-template, xray-poc, ez-poc] - for Python
  ☆14Mar 27, 2022Updated 4 years ago
• X1cT34m / NCTF2024

  View on GitHub
  NCTF 2024 challenges and writeups
  ☆10Apr 11, 2025Updated last year
• libmifan / AM0N-Eye

  View on GitHub
  ☆16Mar 26, 2023Updated 3 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• carlospolop / easy_stegoCTF

  View on GitHub
  Brutteforce for stego CTFs
  ☆17Nov 2, 2022Updated 3 years ago
• husseinphp / Hide-Search-Result

  View on GitHub
  ☆14Nov 8, 2024Updated last year
• CRONUS-Security / flow_analysis

  View on GitHub
  ☆12Oct 31, 2024Updated last year
• suizhibo / MemShellKiller

  View on GitHub
  基于Agent技术实现的Java内存马查杀、防护工具。
  ☆94Jul 25, 2024Updated 2 years ago
• FlyingPhish / ROADTools-Analyser

  View on GitHub
  This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…
  ☆22Jul 3, 2024Updated 2 years ago
• yuanLink / PwnWAF

  View on GitHub
  pwn log tools for AWD
  ☆12May 29, 2018Updated 8 years ago
• asciidisco / webusb-workshop

  View on GitHub
  Learn how to steer POS printers with WebUSB
  ☆10Mar 14, 2019Updated 7 years ago
• yueshenyuan / JS-share

  View on GitHub
  一款支持微信和QQ、UC手机浏览器的分享工具，可以自定义标题、链接、icon等
  ☆12Apr 19, 2018Updated 8 years ago
• VHSgunzo / ssrv

  View on GitHub
  Shell server/client
  ☆15Dec 31, 2025Updated 9 months ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• evilsocket / hcidump-android

  View on GitHub
  hcidump for android
  ☆11Jan 28, 2015Updated 11 years ago
• aicoa / k8spentool-go

  View on GitHub
  将传统的k8s攻击手法进行整合，融入cdk的相关exp，接入llm并提供attack接口完成k8s自动化渗透。
  ☆31Jul 12, 2026Updated 3 months ago
• Bamboo-fly / Android-Vulnerability-Analysis

  View on GitHub
  基于JavaFX框架做的一款安卓漏洞分析桌面软件，采用了反编译技术与静态分析技术，上传apk包即可分析APP可能包含的风险。
  ☆14Nov 23, 2022Updated 3 years ago
• kankburhan / gampung

  View on GitHub
  Gampung tools for find nuclei template from github
  ☆12Sep 6, 2023Updated 3 years ago
• InfoSecREDD / Termux-Helper-Script

  View on GitHub
  This is a personal script used to link Kali Nethunter Chroot/Termux to the Proxmark3 and small patch for DriveDroid on Android 12.
  ☆10Jan 24, 2022Updated 4 years ago
• westinyang / hap-viewer

  View on GitHub
  🔍 一个跨平台的hap查看器，方便开发者在电脑上预览hap的信息，并提供一键安装到设备等功能
  ☆23Jun 29, 2024Updated 2 years ago
• vaishalinagori / AutoCrypt-Burp-Extension

  View on GitHub
  ☆13Oct 24, 2024Updated last year
• wgpsec / RekSai

  View on GitHub
  RekSai 多个工具的功能结合起来，然后自动信息收集，保存结果
  ☆11Nov 10, 2020Updated 5 years ago
• bp0lr / altdns

  View on GitHub
  Generates permutations, alterations and mutations of subdomains. Auto Resolve what we find.
  ☆11Dec 8, 2020Updated 5 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• iSafeBlue / secfile

  View on GitHub
  《安全档案》信息安全技术期刊
  ☆11Mar 30, 2019Updated 7 years ago
• takshal / Git-Finder

  View on GitHub
  Git-Finder is a tool that searches through public repositories to find sensitive information like password,auth_token, etc uploaded to t…
  ☆13Mar 15, 2020Updated 6 years ago
• Vozec / CTFlagger

  View on GitHub
  This website is used to automatically scan files during CTF.
  ☆14May 31, 2023Updated 3 years ago
• ThioJoe / BasicStabilityAPI-GUI

  View on GitHub
  A basic GUI for interacting with the Stability AI API for Stable Diffusion 3
  ☆14Apr 22, 2024Updated 2 years ago
• Whoopsunix / PPPRASP

  View on GitHub
  JavaRce complements project - use RASP to prevent vulnerabilities
  ☆24Apr 22, 2024Updated 2 years ago
• benjamin-shi / AIMHanXinCode.Net

  View on GitHub
  AIM International Technical Specification - Han Xin Code Encoding Library for .Net
  ☆12May 9, 2019Updated 7 years ago
• twowb / ztor

  View on GitHub
  防溯源利器之ztor代理（自定义秒级更换IP）
  ☆12Feb 23, 2024Updated 2 years ago