crithit

crithit Directory e file brute forcing su siti web a scala estrema. CritHit prende un singolo elemento della wordlist e lo testa uno per uno su una vasta raccolta di host prima di passare all'elemento successivo. L'intenzione del brute forcing eseguito in questo modo è di evitare i blocchi dei We...

BurpSuiteHTTPSmuggler

Burp Suite HTTP Smuggler Eine Burp-Suite-Erweiterung, die Pentestern hilft, WAFs zu umgehen oder deren Wirksamkeit mithilfe einer Reihe von Techniken zu testen. Diese Erweiterung wurde von Soroush Dalili @irsdl von der NCC Group entwickelt. Die erste Version v0.1 unterstützt nur die...

bantam

Bantam Un avanzato strumento di gestione delle backdoor PHP, con un'impronta server leggera, comunicazione multi-thread e un avanzato strumento di generazione e offuscamento del payload. Include crittografia end-to-end con chiavi di crittografia uniche per richiesta e streaming di payload...

CVE-2023-5561-POC-Updated

CVE-2023-5561-POC-Updated Este repositório contém uma versão modificada do Proof-of-Concept PoC original para CVE-2023-5561. O PoC original, que pode ser encontrado aqui, envia um alto volume de solicitações em paralelo, o que pode acionar Web Application Firewalls WAFs ou fazer com que o servido...

Log4Shell-obfuscated-payloads-generator

Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator può generare payload offuscati primari o offuscati secondari per CVE-2021-44228 o CVE-2021-45046 per eludere il rilevamento WAF. The design idea of ​​Log4Shell-obfuscated-payloads-generator Installazione root@kitploit...

log4j-scan

log4j-scan Uno scanner completamente automatizzato, accurato ed estensivo per trovare host vulnerabili a log4j Caratteristiche Supporto per liste di URL. Fuzzing su oltre 60 intestazioni delle richieste HTTP non solo 3-4 intestazioni come negli strumenti visti in precedenza. Fuzzing sui parametri...

burpfox

🦊 BurpFox Un'estensione di Burp Suite che integra lo scanner XSS Dalfox direttamente nel tuo flusso di lavoro. Funzionalità 🎯 Scansione con clic destro - Scansiona richieste direttamente dalla Cronologia Proxy o da Repeater. ⚙️ Opzioni complete di Dalfox - Consapevolezza del contesto, evasione...

CVE-2025-29927

CVE-2025-29927 - Next.js 中间件认证绕过（高级绕过） 🔥 概述 针对 CVE-2025-29927 的 高级 PoC ，通过操纵特定标头实现 Next.js 中间件 中的认证绕过。 此模板增强了 WAF 绕过 和 安全绕过 技术。 🚀 功能特性 ✅ 多请求与 HTTP 方法变异 → 使用 GET、POST 最大化检测覆盖。 ✅ WAF 绕过 → 包含 X-Forwarded-For、X-Original-URL、X-Rewrite-URL 等。 ✅ 随机化查询参数 → 防止缓存问题，提高绕过可靠性。 ✅ 多种响应匹配 → 检测 200 OK、Next.js...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Профессиональный сканер RCE уязвимости CVE-2025-66478 для Next.js RSC 🎯 Обзор React2Shell Ultimate — это комплексный сканер уязвимости CVE-2025-66478, критической уязвимости удалённого выполнения кода RCE, затрагивающей приложения Next.js, использующие React Serv...

pymultitor

PyMultiTor Python Multi-Threaded Tor-Proxy, Wolltest du schon immer an zwei verschiedenen Orten gleichzeitig sein? Als ich mir diese Frage stellte, begann ich tatsächlich, diese Lösung in meinem Kopf zu entwickeln. Bei Penetrationstests gibt es oft Probleme durch Sicherheitsgeräte, die die...

goca

Goca is a FOCA fork written in Go, which is a tool used mainly to find metadata and hidden information in the documents its scans. These documents may be on web pages, and can be downloaded and analyzed with Goca. It is capable of analyzing a wide variety of documents, with the most common being...

burp-awesome-tls

Awesome TLS Esta extensão assume o controle da pilha HTTP e TLS do Burp, permitindo que você falsifique qualquer impressão digital TLS de navegador JA3. Ela potencializa o Burp Suite enquanto reduz a probabilidade de detecção por fingerprinting de vários WAFs como CloudFlare, PerimeterX, Akamai,...

erebus

EREBUS Web application security assessment framework. For...

xss

CSS Style Sheet Mutation alert"This is a test" alert"...

RedTrace

RedTrace v3.0 — Web Vulnerability Scanner Professional-grad...

Exploit for Deserialization of Untrusted Data in Facebook React

Chain Reaction High-Performance Rust Scanner for React Serv...

Server-Side Request Forgery (SSRF)

Astro is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insecure and unsanitized use of the x-forwarded-proto and x-forwarded-port headers when constructing URLs, which allows an attacker to manipulate these headers to bypass protected routes, poison caches, trigger...

SMTP2GO BBP: Origin IP found, WAF Cloudflare Bypass

Description: I have discovered that the http://172.105.190.180/login/ site exposed it's IP which could allow bypassing of anti-DDoS mechanisms i.e you are using Cloudflare for protection. For Originate IP address which I found from https://search.censys.io/ By using these IP address as a resolver...

Stopping Active Attacks with Penalty Box

A web application firewall WAF is most often used by organizations for external security controls to detect and block individual attack attempts against target web application assets. Open Web Application Security Project OWASP risk rating methodology Unfortunately, today's sophisticated web...

FAST or Burp or both?

By @aLLy , Wallarm Research Hello guys, time to talk details about Wallarm FAST Framework for Application Security Testing. It’s a new automatic web vulnerability scanning and fuzzing detection tool by Wallarm Inc. It is well suited for security researchers in enterprise Red Teams as well as for...