studiogangster / CVE-2023-44487
A python based exploit to test out rapid reset attack (CVE-2023-44487)
☆16Updated last year
Related projects ⓘ
Alternatives and complementary repositories for CVE-2023-44487
- Create your own recon & vulnerability scanner with Trickest and GitHub☆49Updated last year
- 🔥 Web application firewalls (WAF) bypass☆28Updated last year
- XSS Finder Via SSTI☆54Updated last year
- Exploiting the xmlrpc.php☆27Updated last year
- ☆64Updated 2 years ago
- A set of open-source community scripts☆60Updated last month
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆50Updated 3 years ago
- Rapidly enumerate subdomains and domains using rapiddns.io.☆61Updated 2 years ago
- A powerful and sophisticated tool for detecting and exploiting open redirect vulnerabilities using the sed utility and a selected list of…☆37Updated 2 months ago
- this script will help you find favicon hashes which you can use to shodan to get more details about an asset☆26Updated 9 months ago
- Build OpenApi specs for your APIs from Burp's traffic using Levo.ai. Also detect the PII in your APIs.☆24Updated 3 months ago
- Apache Tomcat exploit and Pentesting guide for penetration tester☆54Updated 2 years ago
- Script to automate, when possible, the passive reconnaissance performed on a website prior to an assessment.☆36Updated last week
- Some contributions in the nuclei-templates repository☆55Updated 2 years ago
- A simple automation tool to detect lfi, rce and ssti vulnerability☆55Updated 2 years ago
- Tool for fetching all the available waybackmachine snapshot urls☆18Updated last month
- Some Dorking resources☆32Updated 3 months ago
- My useful files for penetration tests, security assessments, bug bounty and other security related stuff☆140Updated this week
- A tool for Oragnized ASM (Attack Surface Mapper). Subdomains enumeration, IPs scans, Vulnerability assesment...☆37Updated last year
- ☆23Updated 3 years ago
- A proper approach to pentest a Web application with the mixture of all useful payloads and complete testing guidance of attacks. Designed…☆40Updated 3 months ago
- Exploiting the xmlrpc.php on all WordPress versions☆23Updated 2 years ago
- Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE☆52Updated 2 weeks ago
- A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.☆75Updated 2 years ago
- A GO module to get domain name from SSL certificates when an IP address is provided.☆33Updated last year
- A fast network scanning tool to detect open ports and security vulnerabilities☆97Updated 2 weeks ago
- Swagger UI >=3.14.1 < 3.38.0 XSS payload☆12Updated 7 months ago
- SQLMutant is a comprehensive SQL injection testing tool that provides several features to test for SQL injection vulnerabilities in web a…☆111Updated 2 months ago
- Multi-threaded URL enumeration/content-discovery tool in Python.☆107Updated 8 months ago