dustyfresh / PHP-vulnerability-audit-cheatsheet
This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabilities you generally find with that function.
☆349Updated 3 weeks ago
Alternatives and similar repositories for PHP-vulnerability-audit-cheatsheet:
Users that are interested in PHP-vulnerability-audit-cheatsheet are comparing it to the libraries listed below
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…☆284Updated 2 months ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆258Updated 3 years ago
- ☆264Updated 6 years ago
- TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.☆312Updated last year
- DNS Rebinding Exploitation Framework☆488Updated 3 years ago
- Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …☆220Updated 2 years ago
- Fuzzing Payloads to Assist in Web Application Testing.☆166Updated 5 years ago
- A mini webserver with FTP support for XXE payloads☆328Updated last year
- exploit for ImageMagick's uninitialized memory disclosure in gif coder☆280Updated 7 years ago
- A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.☆396Updated 4 years ago
- Utils☆267Updated 9 years ago
- Lesser Known Web Attack Lab☆330Updated 5 years ago
- Pentest/BugBounty progress control with scanning modules☆281Updated 4 years ago
- An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker …☆257Updated 3 years ago
- A collection of useful Serverless functions I use when pentesting☆382Updated 2 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆254Updated 9 months ago
- Sample vulnerable code and its exploit code☆189Updated 4 years ago
- ☆325Updated 7 years ago
- rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments☆245Updated 5 years ago
- The Bug Bounty Wiki☆172Updated 6 years ago
- Simple python script to extract unsafe functions from php projects☆199Updated 7 years ago
- kadimus is a tool to check and exploit lfi vulnerability.☆528Updated 4 years ago
- Automatic tool for DNS rebinding-based SSRF attacks☆298Updated 4 years ago
- Some tools to automate recon - 003random☆294Updated 6 years ago
- SSRF testing tool☆244Updated 2 years ago
- Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT☆395Updated 8 months ago
- Various Payload wordlists☆235Updated 4 years ago
- Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]☆306Updated 6 years ago
- Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)☆451Updated 5 years ago
- Hunting Bugs for Fun and Profit☆266Updated 4 years ago