oppsec / tomcter
😹 Bruteforce Apache Tomcat manager login with default credentials
☆101Updated 11 months ago
Alternatives and similar repositories for tomcter:
Users that are interested in tomcter are comparing it to the libraries listed below
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆84Updated last year
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆74Updated last year
- CVE Collection of jQuery UI XSS Payloads☆118Updated 2 years ago
- Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.☆80Updated last year
- Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the int…☆113Updated 2 months ago
- WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…☆65Updated last year
- The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.☆69Updated 11 months ago
- CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC☆119Updated last year
- PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)☆87Updated 2 years ago
- ☆34Updated last year
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆52Updated 3 months ago
- A Burp Suite extension for finding DNS vulnerabilities in web applications!☆94Updated last year
- Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence☆75Updated last year
- BChecks collection for Burp Suite Professional☆92Updated 8 months ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆253Updated 9 months ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆49Updated 2 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆44Updated 11 months ago
- Exploits targeting vBulletin.☆76Updated last year
- Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage…☆64Updated 2 months ago
- Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability☆56Updated last year
- CVE-2024-21893: SSRF Vulnerability in Ivanti Connect Secure☆90Updated last year
- Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)☆75Updated 8 months ago
- Authentication Bypass in GoAnywhere MFT☆61Updated last year
- Web cache poisoning vulnerability scanner.☆64Updated 2 years ago
- Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.☆39Updated 2 years ago
- ☆52Updated 2 years ago
- Custom scan profiles for use with Burp Suite Pro☆121Updated 11 months ago
- Text4Shell scanner for Burp Suite☆189Updated 2 years ago
- A command-line utility for performing reverse DNS lookups☆67Updated last year
- Mine URLs from Browser's Heap Snapshot for fun and profit☆63Updated last year