oppsec / tomcter
😹 Tomcter is a python tool developed to bruteforce Apache Tomcat manager login with default credentials.
☆101Updated 8 months ago
Related projects ⓘ
Alternatives and complementary repositories for tomcter
- CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC☆117Updated last year
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆85Updated 9 months ago
- The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.☆65Updated 8 months ago
- CVE Collection of jQuery UI XSS Payloads☆115Updated last year
- Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the int…☆106Updated last week
- A command-line utility for performing reverse DNS lookups☆59Updated last year
- Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence☆75Updated last year
- WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…☆60Updated 10 months ago
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆52Updated 3 weeks ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆68Updated 10 months ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆42Updated 8 months ago
- WEB-Wordlist-Generator creates related wordlists after scanning your web applications.☆43Updated 5 months ago
- A Burp Suite extension for finding DNS vulnerabilities in web applications!☆94Updated last year
- A rapid HTTP downgrade smuggling scanner written in Go.☆248Updated 6 months ago
- Apache Spark Shell Command Injection Vulnerability☆87Updated 2 years ago
- PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)☆87Updated 2 years ago
- Text4Shell scanner for Burp Suite☆191Updated 2 years ago
- A better way of querying certificate transparency logs☆75Updated last year
- Encoder PHP webshell to bypass WAF using XOR operations.☆51Updated last year
- GeoServer Remote Code Execution☆74Updated 3 months ago
- A go-exploit to scan for Juniper firewalls vulnerable to CVE-2023-36845☆60Updated 3 weeks ago
- Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.☆71Updated last year
- A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.☆112Updated this week
- BChecks collection for Burp Suite Professional☆83Updated 5 months ago
- Authentication Bypass in GoAnywhere MFT☆64Updated 9 months ago
- ☆69Updated 6 months ago
- Web API for nuclei and subfinder will help you automate your entire security testing workflow since you can host it anywhere and make it …☆60Updated 2 years ago
- ☆31Updated 2 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆48Updated 2 years ago
- ☆80Updated 6 months ago