This repo contains labs for bypassing path normalization issues involving Nginx and e.g. Flask and Node.js
☆15May 16, 2024Updated 2 years ago
Alternatives and similar repositories for path-normalization-bypasses
Users that are interested in path-normalization-bypasses are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 基于多种策略, 对已有 JAR 包中的全限定类名进行变换, 无限生成高度相似的虚假类名☆20Jul 30, 2025Updated last year
- ☆98Updated this week
- ☆23Apr 4, 2025Updated last year
- 黑盒越权测试工具☆15Mar 13, 2025Updated last year
- 一款基于正则匹配的phpinfo信息收集工具☆19Jan 20, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Citrix CVE-2023-4966 from assetnote modified for parallel and file handling☆11Oct 25, 2023Updated 2 years ago
- Malware detection with added explanability of AI through saliency map on Android APK using PyTorch and Androguard.☆12Feb 15, 2024Updated 2 years ago
- Android渗透测试脚本, by Tr0e.☆29Jun 19, 2024Updated 2 years ago
- A command line tool that reads from stdin and strips ANSI color codes from the input.☆10Feb 11, 2023Updated 3 years ago
- Android malware classification using both .java files and .so files☆11Jan 19, 2019Updated 7 years ago
- ExprInject / Java表达式注入自动化扫描 / Code By:Tas9er☆42Sep 11, 2025Updated 11 months ago
- SecureBinder 是一款跨平台二进制文件捆绑与加壳工具，支持将两个 .exe / .elf / .apk 文件合并为一个自解压自执行的单文件。工具内置 RC4 加密、zlib 压缩、PyInstaller 打包、UPX 二次压缩与沙箱检测机制，适用于软件封装、双程序…☆15Jun 29, 2025Updated last year
- https://oopquiz.fly.dev☆11Oct 31, 2023Updated 2 years ago
- Practical Implementation of the Maurer Reduction☆11Jul 13, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Many yaml scanner plugin parser [nuclei-template, xray-poc, ez-poc] - for Python☆14Mar 27, 2022Updated 4 years ago
- 【Hello-CTF labs】一个想要帮你搞定CTF中所有隐写技术的靶场，让知识更体系化一点。☆21Jul 16, 2024Updated 2 years ago
- NCTF 2024 challenges and writeups☆10Apr 11, 2025Updated last year
- ☆16Mar 26, 2023Updated 3 years ago
- ☆14Nov 8, 2024Updated last year
- Official writeup for D^3CTF 2025☆19Jun 2, 2025Updated last year
- ☆53Dec 8, 2025Updated 8 months ago
- 基于Agent技术实现的Java内存马查杀、防护工具。☆95Jul 25, 2024Updated 2 years ago
- This python script performs a number of sqlite queries (mainly password metadata) against sqlite databases (Created by ROADtools) to prov…☆22Jul 3, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- idaflirt-detector is Python scripts and IDA FLIRT signatures to detect statically linked libraries from stripped ELF file.☆12May 19, 2022Updated 4 years ago
- Shell server/client☆14Dec 31, 2025Updated 8 months ago
- hcidump for android☆11Jan 28, 2015Updated 11 years ago
- A rewrite of the popular altDNS subdomain tool by @infosec-au☆12Feb 28, 2019Updated 7 years ago
- 将传统的k8s攻击手法进行整合，融入cdk的相关exp，接入llm并提供attack接口完成k8s自动化渗透。☆31Jul 12, 2026Updated last month
- 基于JavaFX框架做的一款安卓漏洞分析桌面软件，采用了反编译技术与静态分析技术，上传apk包即可分析APP可能包含的风险。☆14Nov 23, 2022Updated 3 years ago
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 2 years ago
- ☆23Jan 15, 2025Updated last year
- 🔍 一个跨平台的hap查看器，方便开发者在电脑上预览hap的信息，并提供一键安装到设备等功能☆24Jun 29, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆13Oct 24, 2024Updated last year
- RekSai 多个工具的功能结合起来，然后自动信息收集，保存结果☆11Nov 10, 2020Updated 5 years ago
- Generates permutations, alterations and mutations of subdomains. Auto Resolve what we find.☆11Dec 8, 2020Updated 5 years ago
- 《安全档案》信息安全技术期刊☆11Mar 30, 2019Updated 7 years ago
- A basic GUI for interacting with the Stability AI API for Stable Diffusion 3☆14Apr 22, 2024Updated 2 years ago
- Git-Finder is a tool that searches through public repositories to find sensitive information like password,auth_token, etc uploaded to t…☆13Mar 15, 2020Updated 6 years ago
- This website is used to automatically scan files during CTF.☆14May 31, 2023Updated 3 years ago