SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities
☆183Mar 2, 2021Updated 5 years ago
Alternatives and similar repositories for ssrfuzz
Users that are interested in ssrfuzz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SSRF (Server Side Request Forgery) testing resources☆2,510Oct 12, 2024Updated 2 years ago
- Burp Suite extension for parsing Swagger web service definition files☆20Jul 15, 2025Updated last year
- DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it☆453Jan 9, 2024Updated 2 years ago
- SSRF plugin for burp Automates SSRF Detection in all of the Request☆635Jan 20, 2021Updated 5 years ago
- BurpBounty 魔改版本☆415Mar 21, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Endpoint monitor tool☆21Sep 16, 2020Updated 6 years ago
- ☆143Jul 25, 2022Updated 4 years ago
- A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.☆517Jul 29, 2020Updated 6 years ago
- ☆11May 15, 2020Updated 6 years ago
- Some Tutorials and Things to Help Bug Hunter☆31Mar 17, 2021Updated 5 years ago
- 完善的动态备份文件扫描工具 实现动态字典渲染、动态结果判断、自动字典记录、的敏感文件扫描器☆29May 21, 2025Updated last year
- Windows NTLMSSP library☆10Aug 27, 2021Updated 5 years ago
- 基于burpsuite的资产分析工具☆471Apr 29, 2023Updated 3 years ago
- SSRF 绕过 Payload☆15Nov 12, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- This tool generates gopher link for exploiting SSRF and gaining RCE in various servers☆3,433Apr 18, 2023Updated 3 years ago
- A collection of famous recon public scripts, but in bash <3☆29Mar 2, 2021Updated 5 years ago
- automated web assets enumeration & scanning [DEPRECATED]☆287Mar 7, 2023Updated 3 years ago
- An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability☆465Aug 7, 2026Updated 3 months ago
- An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…☆808May 11, 2026Updated 5 months ago
- 反取证程序，类似usbkill☆10Apr 22, 2023Updated 3 years ago
- Burp extension intended to compact Burp extension tabs by hijacking them to own tab.☆131Dec 28, 2020Updated 5 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,648Aug 10, 2026Updated 3 months ago
- Gotator is a tool to generate DNS wordlists through permutations.☆540Jul 17, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 事件驱动的渗透测试扫描器 Event-driven pentest scanner☆700Jul 7, 2024Updated 2 years ago
- Burp插件，自动化挖掘SSRF，Redirect，Sqli漏洞，自定义匹配参数☆491Sep 10, 2023Updated 3 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- ssshh its a secret ;)☆22Mar 7, 2022Updated 4 years ago
- CTFCrackTools 's BurpSuite Plugin - Decode and Encode☆80Apr 5, 2022Updated 4 years ago
- CRLFMap is a tool to find HTTP Splitting vulnerabilities☆33Oct 11, 2020Updated 6 years ago
- A Swagger API Exploit☆1,377Jun 7, 2024Updated 2 years ago
- Armor 浏览器反蜜罐插件 honeypot☆178Jun 28, 2021Updated 5 years ago
- ☆46Jun 5, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- blaster 是一款弱密码隐患检测工具，用于网站登录弱密码检测。☆219Feb 16, 2022Updated 4 years ago
- A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it us…☆60Oct 25, 2020Updated 6 years ago
- A simple SSRF-testing sheriff written in Go☆342Oct 31, 2024Updated 2 years ago
- ☆61Apr 8, 2021Updated 5 years ago
- 获取 alibaba druid 一些 sessions , sql , urls☆323Apr 4, 2025Updated last year
- 批量处理url链接，获取多级路径并打印☆45Jul 12, 2023Updated 3 years ago
- 这是一个用于IP和域名碰撞匹配访问的小工具优化版，能减少碰撞中出来的误报，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。☆48Nov 18, 2021Updated 4 years ago
Are these results useful?