hussein98d / LFI-filesLinks
Wordlist to bruteforce for LFI
☆128Updated 6 years ago
Alternatives and similar repositories for LFI-files
Users that are interested in LFI-files are comparing it to the libraries listed below
Sorting:
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆164Updated 4 years ago
- Prototype Pollution Scanner☆133Updated 4 years ago
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆131Updated 4 years ago
- LFI Payloads List coolected from github repos☆85Updated 5 years ago
- All known and unknown public POC's for wordpress themes and plugins☆78Updated 4 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆120Updated 2 years ago
- Check AWS S3 instances for read/write/delete access☆121Updated 3 years ago
- A Burp Suite plugin/extension that offers a shell in Burp. Both useful for OS Command injection and LFI exploration☆77Updated 5 years ago
- ☆97Updated 4 years ago
- nuclei-bb-templates☆50Updated 3 years ago
- ☆90Updated 4 years ago
- Burp Extension that copies a request and builds a FFUF skeleton☆112Updated 2 years ago
- ☆86Updated 3 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Updated 3 years ago
- Modified Nuclei Templates Version to FUZZ Host Header☆51Updated 4 years ago
- Small tool to automate SSRF wordpress and XMLRPC finder☆82Updated 3 years ago
- Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.☆112Updated 3 years ago
- ☆96Updated 5 years ago
- A simple remote scanner for Atlassian Jira☆121Updated 2 years ago
- The project aims at creating target-specific wordlists for any web application that you are testing.☆67Updated 3 years ago
- 📚 An ultimate collection wordlists of the best-known CMS☆92Updated last year
- Subdomain Monitor A production-ready subdomain monitoring system with both API and CLI interfaces.☆72Updated this week
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆96Updated 4 years ago
- Extract JavaScript files from burp suite project with ease.☆98Updated 3 years ago
- Searching for virtual hosts among non-resolvable domains☆88Updated 5 years ago
- Workshop given at Hack in Paris 2019☆125Updated 2 years ago
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆184Updated 4 years ago
- Generates target specific word lists for Fuzzing with fuff☆112Updated 5 years ago
- Directory scans☆84Updated this week
- Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.☆61Updated 3 months ago