vladko312 / SSTImap
Automatic SSTI detection tool with interactive interface
☆821Updated last month
Related projects ⓘ
Alternatives and complementary repositories for SSTImap
- Burp Plugin to Bypass WAFs through the insertion of Junk Data☆916Updated 3 months ago
- Nuclei Templates Collection☆908Updated 6 months ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,253Updated 4 months ago
- NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆1,308Updated 2 months ago
- An IIS short filename enumeration tool☆802Updated 3 months ago
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆50Updated 6 months ago
- 1337 Wordlists for Bug Bounty Hunting☆790Updated 2 weeks ago
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆736Updated last year
- Nuclei plugin for BurpSuite☆1,193Updated 2 months ago
- A simple tool for bypassing file upload restrictions.☆783Updated 3 months ago
- Tool to bypass 403/40X response codes.☆1,112Updated 3 months ago
- The EXCLUSIVE Collection of 40,000+ Nuclei templates based on Wordfence intel. Daily updates for bulletproof WordPress security.☆923Updated this week
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆829Updated last year
- ☆698Updated last year
- Nuclei AI - Browser Extension for Rapid Nuclei Template Generation☆448Updated last year
- ☆512Updated 4 months ago
- ☆492Updated 5 months ago
- Fast and customizable subdomain wordlist generator using DSL☆728Updated this week
- BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition☆630Updated 2 weeks ago
- A python script to scan for Apache Tomcat server vulnerabilities.☆791Updated last month
- An XSS exploitation command-line interface and payload generator.☆1,268Updated 3 months ago
- ☆516Updated last year
- This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contai…☆496Updated 8 months ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,328Updated 2 years ago
- ☆854Updated 5 months ago
- A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations,…☆354Updated last month
- Real-world infosec wordlists, updated regularly☆1,400Updated this week
- 🎯 Server Side Template Injection Payloads☆602Updated 4 months ago
- ☆738Updated last week
- Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…☆338Updated this week