r0oth3x49 / Xpath
A python based cross-platform tool that automates the process of detecting and exploiting error-based injection security flaws.
☆140Updated 2 years ago
Alternatives and similar repositories for Xpath:
Users that are interested in Xpath are comparing it to the libraries listed below
- Bypassing-Web-Application-Firewalls-And-XSS-Filters A series of python scripts for generating weird character combinations and lists for…☆146Updated 4 years ago
- Wordlist for content(directory) bruteforce discovering with Burp or dirsearch☆214Updated 6 months ago
- Toolset for detecting reflected xss in websites☆113Updated 6 years ago
- Bypassing WAF by abusing SSL/TLS Ciphers☆315Updated 3 years ago
- SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...☆231Updated 5 years ago
- Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.☆314Updated 3 years ago
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆139Updated 4 years ago
- Exploits by 1N3 @CrowdShield @xer0dayz @XeroSecurity☆201Updated 3 years ago
- Local File Inclusion Exploitation Tool (mirror)☆125Updated 8 years ago
- Relational database brute force and post exploitation tool for MySQL and MSSQL☆221Updated 10 months ago
- POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.☆111Updated 2 years ago
- A web-application vulnerability scanner☆118Updated 4 years ago
- CVE-2017-9506 - SSRF☆188Updated 3 years ago
- This python script is developed to show, how many vulnerables websites, which are laying around on the web. 1) Scan net for urls prone to…☆54Updated 8 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆254Updated 10 months ago
- File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.☆272Updated 4 years ago
- a tiny tool for swf hacking, just browse it:)☆242Updated 12 years ago
- BugBounty Tool☆39Updated 5 years ago
- Burp Suite extension to easily export sub domains☆44Updated 5 years ago
- Command line tool for testing CRLF injection on a list of domains.☆162Updated last year
- A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers☆275Updated 6 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆295Updated 5 years ago
- Powerful Visual Subdomain Enumeration at the Click of a Mouse☆139Updated 5 years ago
- CMS Scanner Framework☆130Updated 3 weeks ago
- Virtual host bruteforcer☆111Updated 8 years ago
- Web Fuzzing Discovery and Attack Pattern Database☆113Updated 7 years ago
- Containing Self Made Perl Reproducers / PoC Codes☆193Updated 5 years ago
- An Exploit framework for Web Vulnerabilities written in Python☆170Updated 4 years ago
- Burp Suite Extensions☆127Updated 11 years ago
- Burp Suite extension to discover assets from HTTP response.☆225Updated 3 months ago