A tool to discover and exploit Nginx alias traversal misconfiguration, the tool can bruteforce the URL path recursively to find out hidden files and directories.
☆132Dec 10, 2023Updated 2 years ago
Alternatives and similar repositories for Kyubi
Users that are interested in Kyubi are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.☆1,599Mar 4, 2024Updated 2 years ago
- Endpoint monitor tool☆21Sep 16, 2020Updated 5 years ago
- Host Header Injection Checker☆84Mar 2, 2022Updated 4 years ago
- ☆39Nov 27, 2020Updated 5 years ago
- ☆11Aug 27, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Multithreaded Host Header Redirection Scanner☆14Nov 10, 2020Updated 5 years ago
- A Payload Injector for bugbounties written in go☆70Jul 18, 2020Updated 6 years ago
- Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …☆53Jul 14, 2021Updated 5 years ago
- A tool to abuse Exchange services☆12Mar 18, 2024Updated 2 years ago
- ☆10Oct 30, 2019Updated 6 years ago
- Signatures for jaeles scanner by @j3ssie☆117Apr 20, 2024Updated 2 years ago
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆30Oct 18, 2021Updated 4 years ago
- Auto Recon Bash Script☆31Dec 31, 2024Updated last year
- OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently☆12Feb 19, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆15Dec 15, 2020Updated 5 years ago
- Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …☆150Apr 12, 2024Updated 2 years ago
- A Tool to find subdomains from hackerone reports.☆17Jun 23, 2021Updated 5 years ago
- Running nuclei Continuously☆57Nov 11, 2022Updated 3 years ago
- Wraps projectdiscovery's cdncheck library to exclude CDN hosts from input passed over stdin☆45Mar 13, 2023Updated 3 years ago
- HTTP parameter discovery suite.☆93Apr 16, 2020Updated 6 years ago
- A tool to test working urls.☆43Nov 17, 2020Updated 5 years ago
- Shodan Favicon Hash Generator By Aziz Hakim @eternyle☆26May 25, 2024Updated 2 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆297Sep 22, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The original slurp source☆31Nov 25, 2018Updated 7 years ago
- Tool to automate recon☆45Dec 28, 2021Updated 4 years ago
- PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template☆32Dec 7, 2025Updated 7 months ago
- A tool to check a bunch of URLs that contain reflecting params.☆603Aug 4, 2024Updated last year
- Tool for catching and logging different types of requests.☆220Nov 20, 2020Updated 5 years ago
- Prototype pollution scanner using headless chrome☆217Jul 27, 2022Updated 3 years ago
- Web Application recon automation☆125Dec 18, 2020Updated 5 years ago
- A CLI utility to scan S3 buckets permissions☆14May 14, 2023Updated 3 years ago
- Simple Ransoware to attack Windows 🌟☆27Apr 19, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆11May 15, 2020Updated 6 years ago
- XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|ID…☆350Jun 17, 2023Updated 3 years ago
- A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows☆308Sep 8, 2023Updated 2 years ago
- Hidden parameters discovery suite☆2,085Sep 8, 2024Updated last year
- All known and unknown public POC's for wordpress themes and plugins☆79Jun 23, 2021Updated 5 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- ☆12Feb 18, 2022Updated 4 years ago