Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
☆79Jan 13, 2026Updated 9 months ago
Alternatives and similar repositories for ronin-vulns
Users that are interested in ronin-vulns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Get list of subsidiaries for a selected company☆32Dec 21, 2024Updated last year
- A common database library for managing and querying security data☆18Jan 12, 2026Updated 9 months ago
- Burp Extender, ssrf scanner, 自动扫描ssrf漏洞☆46Mar 31, 2021Updated 5 years ago
- nistrich allows you to discover CVEs and their severities belong to IP addresses☆13Dec 28, 2022Updated 3 years ago
- CVE-2022-22980环境☆14Jul 14, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆29Jul 14, 2023Updated 3 years ago
- EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.☆71Sep 20, 2024Updated 2 years ago
- CVE-2023-34362: MOVEit Transfer Unauthenticated RCE☆64Mar 24, 2024Updated 2 years ago
- Report and finding templates used by the Serpico reporting tool☆16Sep 26, 2018Updated 8 years ago
- jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()…☆11Apr 9, 2021Updated 5 years ago
- A Ruby DSL for crafting SQL Injections☆46Jan 12, 2026Updated 9 months ago
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆22Aug 25, 2024Updated 2 years ago
- A Ruby micro-framework for writing and running exploit payloads☆23Jan 16, 2026Updated 9 months ago
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- CLI tool that extracts a regex pattern from a list of urls ( Rust )☆63Sep 14, 2022Updated 4 years ago
- Create your own recon & vulnerability scanner with Trickest and GitHub☆47Sep 25, 2023Updated 3 years ago
- For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)☆54Feb 26, 2025Updated last year
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆41Apr 18, 2024Updated 2 years ago
- Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite☆82Jan 13, 2023Updated 3 years ago
- Bug bounty API dashboard aggregating data from HackerOne, Bugcrowd and other platforms☆42Aug 13, 2023Updated 3 years ago
- SSH & FTP brute-forcing tool written in python☆11Oct 2, 2024Updated 2 years ago
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 3 years ago
- Smart context-based SSRF vulnerability scanner.☆365May 5, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Automated blind-xss search for Burp Suite☆23Mar 28, 2022Updated 4 years ago
- Real world bug bounty wordlists☆121Jul 20, 2023Updated 3 years ago
- Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications)☆20Aug 9, 2021Updated 5 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.☆252Oct 22, 2026Updated last week
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆376Jul 25, 2023Updated 3 years ago
- Exploration project to invoke syscalls in arbitrary unix processes with ptrace.☆21Jun 14, 2023Updated 3 years ago
- PoC script for CVE-2023-20110 - Cisco Smart Software Manager On-Prem SQL Injection Vulnerability☆16Jul 16, 2023Updated 3 years ago
- ☆17Mar 6, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Generate tens of thousands of subdomain combinations in a matter of seconds☆279Sep 25, 2023Updated 3 years ago
- Pentest-Command☆20Nov 10, 2021Updated 4 years ago
- Let's check if your target is vulnerable for client side prototype pollution.☆64Jan 9, 2024Updated 2 years ago
- A Ruby library and CLI for generating and working with wordlists.☆50Jan 12, 2026Updated 9 months ago
- ☆14Jan 24, 2023Updated 3 years ago
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Oct 7, 2026Updated 3 weeks ago
- 基于JavaFX框架做的一款安卓漏洞分析桌面软件，采用了反编译技术与静态分析技术，上传apk包即可分析APP可能包含的风险。☆14Nov 23, 2022Updated 3 years ago