gnothiseautonlw / burp-shell-fwd-lfi
A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration
☆79Updated 4 years ago
Alternatives and similar repositories for burp-shell-fwd-lfi:
Users that are interested in burp-shell-fwd-lfi are comparing it to the libraries listed below
- Small tool to automate SSRF wordpress and XMLRPC finder☆80Updated 2 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆119Updated last year
- Prototype Pollution Scanner☆115Updated 4 years ago
- All known and unknown public POC's for wordpress themes and plugins☆78Updated 3 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆62Updated last year
- HTTP verb tampering & methods enumeration☆58Updated 3 years ago
- Wordlist to bruteforce for LFI☆123Updated 5 years ago
- Automated Web Recon Shell Scripts☆51Updated 3 years ago
- An MS Sharepoint and Frontpage Auditing Tool☆48Updated 5 months ago
- Nuclei Templates - Here you will find the templates I use while hunting☆117Updated 3 years ago
- ☆32Updated 2 years ago
- A simple Bash one liner with aim to automate CRLF vulnerability scanning.☆69Updated 4 years ago
- Script for Bug Bounty☆28Updated 3 years ago
- Web CTF CheatSheet 🐈☆34Updated 6 years ago
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆44Updated 10 months ago
- The project aims at creating target-specific wordlists for any web application that you are testing.☆65Updated 2 years ago
- IIS shortname scanner + bruteforce☆52Updated last year
- ☆53Updated 3 years ago
- Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi☆39Updated 3 years ago
- ☆60Updated 4 years ago
- Directory scans☆82Updated last year
- XSS Finder Via SSTI☆55Updated last year
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆132Updated 4 years ago
- ☆56Updated 11 months ago
- LFI Payloads List coolected from github repos☆78Updated 4 years ago
- KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…☆58Updated 3 years ago
- ☆95Updated 3 years ago
- Extract JavaScript files from burp suite project with ease.☆88Updated 3 years ago
- Modified Nuclei Templates Version to FUZZ Host Header☆49Updated 3 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆64Updated 5 years ago