This repo contains labs for bypassing path normalization issues involving Nginx and e.g. Flask and Node.js
☆15May 16, 2024Updated 2 years ago
Alternatives and similar repositories for path-normalization-bypasses
Users that are interested in path-normalization-bypasses are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 基于多种策略, 对已有 JAR 包中的全限定类名进行变换, 无限生成高度相似的虚假类名☆20Jul 30, 2025Updated last year
- ☆98Aug 28, 2026Updated 2 months ago
- ☆13Jun 30, 2026Updated 4 months ago
- 一款基于正则匹配的phpinfo信息收集工具☆19Jan 20, 2023Updated 3 years ago
- 2019年暨南大学CTF新生赛题目与源码☆13Jan 8, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Citrix CVE-2023-4966 from assetnote modified for parallel and file handling☆10Oct 25, 2023Updated 3 years ago
- 北邮网络空间安全学院本科生课程资料☆19Jan 20, 2026Updated 9 months ago
- Android渗透测试脚本, by Tr0e.☆29Jun 19, 2024Updated 2 years ago
- ExprInject / Java表达式注入自动化扫描 / Code By:Tas9er☆42Sep 11, 2025Updated last year
- A command line tool that reads from stdin and strips ANSI color codes from the input.☆10Feb 11, 2023Updated 3 years ago
- https://oopquiz.fly.dev☆11Oct 31, 2023Updated 3 years ago
- ☆19Oct 13, 2024Updated 2 years ago
- Hermes is an automated security tool written in Python designed to discover Cross-Site Scripting (XSS) vulnerabilities in web application…☆10Aug 22, 2025Updated last year
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- SecureBinder 是一款跨平台二进制文件捆绑与加壳工具，支持将两个 .exe / .elf / .apk 文件合并为一个自解压自执行的单文件。工具内置 RC4 加密、zlib 压缩、PyInstaller 打包、UPX 二次压缩与沙箱检测机制，适用于软件封装、双程序…☆16Jun 29, 2025Updated last year
- scanner and recover the agent memshell☆11Mar 7, 2022Updated 4 years ago
- Full Auto Exploit tool to SQL Injection: Admin Find -dork generation and grab from cx-Security and proxy cheaker and more :)☆29Feb 22, 2018Updated 8 years ago
- Pure-Go Java Decompiler and Serialization Operator☆27Updated this week
- 【Hello-CTF labs】一个想要帮你搞定CTF中所有隐写技术的靶场，让知识更体系化一点。☆20Jul 16, 2024Updated 2 years ago
- Official writeup for D^3CTF 2025☆19Jun 2, 2025Updated last year
- CVE-2021-42287/CVE-2021-42278 Exploiter☆15Jan 12, 2023Updated 3 years ago
- A tool to run a command when the target of a symlink changes☆16Apr 28, 2016Updated 10 years ago
- Build and run Android APK's using an automated script.☆11Sep 8, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A cross-platform terminal client for TTYD WebSocket connections☆11Dec 6, 2025Updated 10 months ago
- Useful "Match and Replace" & "TLS Pass Through" in Burpsuite Rules☆11Sep 26, 2025Updated last year
- 2025 第八届 工业信息安全技能大赛 决赛☆12Apr 1, 2025Updated last year
- Flowslicer is a Binary Ninja plugin to lift code into Data Flow Intermediate Language. Then, it processes data flow slices and analyzes …☆12May 23, 2023Updated 3 years ago
- pwn log tools for AWD☆12May 29, 2018Updated 8 years ago
- Learn how to steer POS printers with WebUSB☆10Mar 14, 2019Updated 7 years ago
- Simple tools to handle string and generate subdomain permutations☆15Jun 8, 2022Updated 4 years ago
- Ale Forensic Suite Toolkit（阿乐取证工具集，简称 AFST） 是一个专为取证人员打造的 AI 赋能的开箱即用工具集成环境。☆22Jul 9, 2026Updated 3 months ago
- Practical Implementation of the Maurer Reduction☆11Jul 13, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 自己挖掘的CMS框架最新漏洞复现文章☆11Apr 17, 2024Updated 2 years ago
- NCTF 2024 challenges and writeups☆10Apr 11, 2025Updated last year
- DNS at ludicrous speed for Go, powered by XDP sockets. [EXPERIMENTAL]☆15Jul 3, 2026Updated 4 months ago
- Find input and textarea hidden parameters in html.☆11Jan 20, 2026Updated 9 months ago
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- CTF常用工具和链接汇总，持续更新，以下所有工具作者全部使用过请大家放心使用，各位有CTF相关好用的工具欢 迎留言。☆73Feb 3, 2026Updated 9 months ago
- A high-performance technology detection tool built with Go, leveraging the projectdiscovery wappalyzergo library to identify web technolo…☆15Oct 5, 2026Updated 3 weeks ago