Drupal enumeration & exploitation tool
☆617Nov 4, 2020Updated 5 years ago
Alternatives and similar repositories for drupwn
Users that are interested in drupwn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.☆1,454Jan 19, 2024Updated 2 years ago
- OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/☆1,196Sep 11, 2024Updated 2 years ago
- Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)☆600Jan 8, 2021Updated 5 years ago
- This tool can be used to brute discover GET and POST parameters☆1,395Aug 24, 2019Updated 7 years ago
- A Ruby framework designed to aid in the penetration testing of WordPress systems.☆1,043Nov 24, 2019Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DNS Takeover tool written in Go☆2,127Oct 21, 2026Updated last week
- CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs☆2,594Jul 17, 2026Updated 3 months ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,216Apr 21, 2024Updated 2 years ago
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆501Aug 7, 2020Updated 6 years ago
- File upload vulnerability scanner and exploitation tool.☆3,340May 8, 2025Updated last year
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆1,973Apr 13, 2022Updated 4 years ago
- A Tool for Domain Flyovers☆5,956May 22, 2022Updated 4 years ago
- Generates permutations, alterations and mutations of subdomains and then resolves them☆2,511Jan 9, 2025Updated last year
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,818Apr 26, 2024Updated 2 years ago
- JShell - Get a JavaScript shell with XSS.☆528May 5, 2019Updated 7 years ago
- Free web-application vulnerability and version scanner☆575Sep 26, 2026Updated last month
- A script to enumerate virtual hosts on a server.☆698Dec 28, 2017Updated 8 years ago
- Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.☆938May 8, 2019Updated 7 years ago
- A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, al…☆1,313Aug 18, 2025Updated last year
- Steal Net-NTLM Hash using Bad-PDF☆1,160Oct 20, 2025Updated last year
- ODAT: Oracle Database Attacking Tool☆1,786Mar 31, 2026Updated 7 months ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆400May 20, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Quick SQLMap Tamper Suggester☆1,409Jul 18, 2022Updated 4 years ago
- A python script that finds endpoints in JavaScript files☆4,470Apr 13, 2024Updated 2 years ago
- DNS Rebinding Exploitation Framework☆496Apr 27, 2021Updated 5 years ago
- Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.☆1,812Dec 1, 2024Updated last year
- CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues☆1,086May 18, 2021Updated 5 years ago
- WEB SERVICE SECURITY ASSESSMENT TOOL☆388Sep 24, 2021Updated 5 years ago
- ☆2,341Aug 26, 2026Updated 2 months ago
- A small tool that extracts relative URLs from a file.☆768Sep 23, 2020Updated 6 years ago
- Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]☆305Oct 14, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.☆2,352Jul 8, 2026Updated 3 months ago
- A Powerful Subdomain Takeover Tool☆967Oct 17, 2023Updated 3 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,642Aug 10, 2026Updated 2 months ago
- Pop shells like a master.☆1,486Apr 2, 2019Updated 7 years ago
- File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.☆274Mar 24, 2021Updated 5 years ago
- PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server☆2,747Dec 12, 2024Updated last year
- The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool…☆1,123Feb 10, 2021Updated 5 years ago