oppsec / tomcter
😹 Tomcter is a python tool developed to bruteforce Apache Tomcat manager login with default credentials.
☆100Updated 6 months ago
Related projects: ⓘ
- Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence☆73Updated 11 months ago
- CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC☆117Updated last year
- The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.☆56Updated 6 months ago
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆84Updated 7 months ago
- CVE Collection of jQuery UI XSS Payloads☆110Updated last year
- A command-line utility for performing reverse DNS lookups☆57Updated last year
- Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.☆70Updated 10 months ago
- PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)☆87Updated last year
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆52Updated 7 months ago
- WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…☆58Updated 8 months ago
- WEB-Wordlist-Generator creates related wordlists after scanning your web applications.☆41Updated 3 months ago
- GeoServer Remote Code Execution☆69Updated last month
- CVE-2024-21893: SSRF Vulnerability in Ivanti Connect Secure☆91Updated 7 months ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆68Updated 8 months ago
- Openfire Console Authentication Bypass Vulnerability with RCE plugin☆41Updated 6 months ago
- phpMyAdmin XSS☆113Updated 2 years ago
- Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)☆71Updated 3 months ago
- Authentication Bypass in GoAnywhere MFT☆63Updated 7 months ago
- Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.☆34Updated last year
- Encoder PHP webshell to bypass WAF using XOR operations.☆52Updated last year
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens☆134Updated 3 months ago
- Proviesec Fuzz Scanner - dir/path web scanner☆98Updated 2 weeks ago
- Repo for hosting rayder workflows☆55Updated last year
- ☆74Updated 4 months ago
- BChecks collection for Burp Suite Professional☆82Updated 3 months ago
- Check subdomains for subdomain takeovers and other DNS tomfoolery☆96Updated this week
- Ghostscript command injection vulnerability PoC (CVE-2023-36664)☆116Updated last year
- A rapid HTTP downgrade smuggling scanner written in Go.☆242Updated 4 months ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆41Updated 6 months ago
- Reverse shell that can bypass windows defender detection☆151Updated 7 months ago