fnk0c / dot2moon
Tool that checks for path traversal traces in a given web application url, plus it is capable of multi-threading, set timeout and 5-layers verification.
☆46Updated 6 years ago
Related projects: ⓘ
- ☆53Updated this week
- A bash script that fetches and maintains thousands of DNS resolvers☆65Updated 4 years ago
- BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolu…☆60Updated 6 years ago
- This script is intended to automate your reconnaissance process in an organized fashion☆38Updated 5 years ago
- This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping☆46Updated 4 years ago
- ☆45Updated this week
- A tool to evaluate Content Security Policies.☆71Updated 4 years ago
- ☆31Updated 5 years ago
- Simple Server Side Request Forgery services enumeration tool.☆54Updated 6 years ago
- A tool for fetching archived URLs (to be rewritten in Go).☆38Updated 6 years ago
- XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily,…☆45Updated 3 years ago
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆45Updated 5 years ago
- Actarus is a custom tool for bug bounty☆75Updated 4 years ago
- A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.☆36Updated 6 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆31Updated 6 years ago
- ☆17Updated this week
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆70Updated 3 years ago
- Scripts to extract files from SCM directories left on web servers☆34Updated last year
- ☆27Updated this week
- A tool that can take a URL or list of URL and prints back SAML consume URL.☆36Updated 5 years ago
- XXRF Shots - Useful for testing SSRF vulnerability☆74Updated last year
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Updated 5 years ago
- Google Chrome Extension automates testing fundamental Web Problems via Chrome☆21Updated 3 years ago
- Burp Suite Importer - Connect to multiple web servers while populating the sitemap.☆48Updated 4 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This …☆60Updated 2 years ago
- Kubernetes Scanner☆41Updated 2 years ago
- Sparty - MS Sharepoint and Frontpage Auditing Tool☆31Updated 10 years ago
- The Outlook HTML Leak Test Project☆41Updated 6 years ago
- Compilation of JavaScript XSS oneliners payloads that rocks your nuts!☆24Updated 7 years ago