tombstoneghost / TIWAP
Totally Insecure Web Application Project (TIWAP)
☆169Updated 10 months ago
Related projects ⓘ
Alternatives and complementary repositories for TIWAP
- this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.☆116Updated 2 years ago
- XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具☆260Updated 4 years ago
- Small Tool written based on chaos from projectdiscovery.io☆167Updated last month
- Pre-Built Vulnerable Multiple API Scenarios Environments Based on Docker-Compose.☆389Updated 2 years ago
- Monitoring exploits & references for CVEs☆229Updated 11 months ago
- a lightweight, flexible and novel open source poc verification framework☆233Updated 2 years ago
- SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.☆159Updated last year
- jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).☆266Updated 5 months ago
- SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities, with CRLF chaining capabilities☆185Updated 3 years ago
- A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations,…☆354Updated last month
- An automation tool to install the most popular tools for bug bounty or pentesting.☆120Updated 3 months ago
- ☆181Updated last year
- SSRF plugin for burp Automates SSRF Detection in all of the Request☆555Updated 3 years ago
- essential templates for kenzer [DEPRECATED]☆109Updated last year
- All Type of Payloads☆126Updated 7 months ago
- pFuzz helps us to bypass web application firewall by using different methods at the same time.☆157Updated 3 years ago
- PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus☆151Updated 6 months ago
- Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.☆185Updated 5 months ago
- Remote Code Injection In Log4j☆460Updated 2 years ago
- Collection of penetration testing tools☆80Updated 3 years ago
- Nuclei templates for K8S security scanning☆102Updated 2 years ago
- Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…☆220Updated 2 months ago
- Afuzz is an automated web path fuzzing tool for the Bug Bounty projects.☆299Updated last year
- VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS☆220Updated 2 years ago
- A more useful CSRF PoC generator on Burp Suite☆87Updated 2 years ago
- SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.☆88Updated last year
- ☆101Updated 2 years ago
- A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities☆116Updated last year