tombstoneghost / TIWAP
Totally Insecure Web Application Project (TIWAP)
☆172Updated last year
Alternatives and similar repositories for TIWAP:
Users that are interested in TIWAP are comparing it to the libraries listed below
- XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具☆263Updated 4 years ago
- Small Tool written based on chaos from projectdiscovery.io☆171Updated 5 months ago
- this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.☆115Updated 2 years ago
- a lightweight, flexible and novel open source poc verification framework☆234Updated 2 years ago
- Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.☆197Updated 10 months ago
- Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.☆396Updated 2 years ago
- jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).☆271Updated 3 months ago
- PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus☆174Updated 10 months ago
- SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.☆161Updated last year
- SSRF plugin for burp Automates SSRF Detection in all of the Request☆576Updated 4 years ago
- A more useful CSRF PoC generator on Burp Suite☆87Updated 2 years ago
- ☆182Updated last year
- SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities☆182Updated 4 years ago
- EPSS & VEDAS Score Aggregator for CVEs☆230Updated this week
- Collection of penetration testing tools☆81Updated 4 years ago
- VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS☆221Updated 3 years ago
- exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts☆162Updated last year
- essential templates for kenzer [DEPRECATED]☆114Updated 2 years ago
- Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.☆304Updated last year
- Text4Shell scanner for Burp Suite☆189Updated 2 years ago
- Nuclei templates for K8S security scanning☆101Updated 3 years ago
- Remote Code Injection In Log4j☆464Updated 3 years ago
- An automation tool to install the most popular tools for bug bounty or pentesting.☆122Updated 8 months ago
- Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…☆244Updated 4 months ago
- Encoder to bypass WAF filters using XOR operations.☆252Updated 2 years ago
- ☆206Updated 3 years ago
- A cli for cracking, testing vulnerabilities on Json Web Token(JWT)☆133Updated last month
- red-tldr is a lightweight text search tool, which is used to help red team staff quickly find the commands and key points they want to ex…☆234Updated 2 years ago
- ☆168Updated 3 years ago
- Authenticated Remote Command Execution in Gitlab via GitHub import☆222Updated 2 years ago