ICG-AutoExploiterBoT OsCommerce Exploits 💥 – OsCommerce 2.x Core RCE Drupal Exploits 💥 – Drupal Add admin – Drupal BruteForcer – Drupal Geddon2 Exploit – Upload shell + Index Joomla Exploits 💥 – Joomla...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published February 21, 2022 · Last modified February 16, 2023
cherrybomb Cherrybomb is a CLI tool that helps you avoid undefined user behavior by validating your API specifications. Our CLI tool is open source, enabling support from both the OpenAPI...
jwt-hack jwt-hack is a tool for hacking/security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brute force). Use Encode mode(JSON to JWT)...
authz0 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials. URLs and Roles are managed as YAML-based templates, which can...
HEY SERIAL! Programmatically create hunting rules for deserialization exploitation with multiple keywords (e.g. cmd.exe) gadget chains (e.g. CommonsCollection) object types (e.g. ViewState, Java, Python Pickle, PHP) encodings (e.g. Base64, raw)...
TProxer A Burp Suite extension was made to automate the process of finding reverse proxy path-based SSRF. How it works Attempts to gain access to internal APIs or files through...
ChronoRace ChronoRace is a tool to accurately perform timed race conditions to circumvent application business logic. I’ve found in my research that well-timed race conditions can allow for uncovering all...
Jira-Lens Jira-Lens 🔍 is a Python Based Vulnerability Scanner for JIRA. Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management. This...
OpenAPI Security Scanner Authorization security issues in modern web applications could not be easily picked up by security scanners. A few examples from Shopify, LINE, NordVPN. One of the reasons is that the...
ipsourcebypass This Python script can be used to bypass IP source restrictions using HTTP headers. Features 17 HTTP headers. Multithreading. JSON export with –json outputfile.json. Auto-detecting most successfully bypasses. Changelog v1.2...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 19, 2021 · Last modified October 25, 2022
JNDI Exploit Kit This is a forked modified version of the great exploitation tool created by @welk1n. This tool can be used to start an HTTP Server, RMI Server, and...
Programming / Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published December 17, 2021
SWAN This branch contains the new generation of the SWAN framework. The SWAN version described in our ESEC/FSE 2020 paper is located on this branch. This paper no longer represents the current state of...
T-Reqs HTTP Fuzzer T-Reqs (Two Requests) is a grammar-based HTTP Fuzzer written as a part of the paper titled “T-Reqs: HTTP Request Smuggling with Differential Fuzzing” which was presented at ACM CCS 2021. T-Reqs...
http2smugl This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 -> HTTP/1.1 conversion by the frontend server. The scheme is as...
Vulnerability Analysis / Web Vulnerability Analysis
by do son · Published November 27, 2021 · Last modified January 5, 2024
dep-scan dep-scan is a fully open-source security audit tool for project dependencies based on known vulnerabilities, advisories, and licenses limitations. Both local repositories and container images are supported as input....
Support Securityonline.info site. Thanks!
