immunIT / drupwn

Related projects ⓘ

Alternatives and complementary repositories for drupwn

• SamJoan / droopescan
  A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
  ☆1,288Updated 10 months ago
• mazen160 / bfac
  BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source c…
  ☆532Updated 2 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆514Updated 4 years ago
• PortSwigger / backslash-powered-scanner
  Finds unknown classes of injection vulnerabilities
  ☆637Updated last year
• mazen160 / server-status_PWN
  A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-s…
  ☆431Updated 3 years ago
• dustyfresh / PHP-vulnerability-audit-cheatsheet
  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…
  ☆346Updated 6 years ago
• mgeeky / tomcatWarDeployer
  Apache Tomcat auto WAR deployment & pwning penetration testing tool.
  ☆414Updated 7 months ago
• codingo / VHostScan
  A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, al…
  ☆1,201Updated 11 months ago
• fgeek / pyfiscan
  Free web-application vulnerability and version scanner
  ☆562Updated 3 months ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆423Updated 4 years ago
• antichown / subdomain-takeover
  Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
  ☆353Updated last year
• PortSwigger / upload-scanner
  HTTP file upload scanner for Burp Proxy
  ☆397Updated last year
• pentester-io / commonspeak
  Content discovery wordlists generated using BigQuery
  ☆558Updated 4 years ago
• OsandaMalith / LFiFreak
  A unique automated LFi Exploiter with Bind/Reverse Shells
  ☆267Updated 9 years ago
• nettitude / xss_payloads
  Exploitation for XSS
  ☆703Updated 3 years ago
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆524Updated 6 years ago
• RhinoSecurityLabs / SleuthQL
  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  ☆465Updated 5 years ago
• appsecco / bugcrowd-levelup-subdomain-enumeration
  This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtu…
  ☆634Updated 5 years ago
• mandatoryprogrammer / xsshunter_client
  Correlated injection proxy tool for XSS Hunter
  ☆249Updated last year
• kurobeats / fimap
  fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion b…
  ☆520Updated 2 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆482Updated 10 months ago
• weev3 / LKWA
  Lesser Known Web Attack Lab
  ☆330Updated 4 years ago
• OWASP / joomscan
  OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/
  ☆1,078Updated 2 months ago
• jobertabma / virtual-host-discovery
  A script to enumerate virtual hosts on a server.
  ☆665Updated 6 years ago
• blark / aiodnsbrute
  Python 3.5+ DNS asynchronous brute force utility
  ☆644Updated last year
• rajeshmajumdar / BruteXSS
  BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar …
  ☆502Updated 3 years ago
• milo2012 / pathbrute
  Pathbrute
  ☆444Updated 4 years ago
• a2u / CVE-2018-7600
  💀Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002
  ☆349Updated 5 years ago
• TypeError / domained
  Multi Tool Subdomain Enumeration
  ☆722Updated 3 years ago
• Ice3man543 / SubOver
  A Powerful Subdomain Takeover Tool
  ☆931Updated last year