crithit

crithit Website Directory and file brute forcing at extreme scale. CritHit takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next wordlist item. The intention of brute foricng in this manner is to avoid low limit Web Application Firewall...

Log4Shell-obfuscated-payloads-generator

Log4Shell-obfuscated-payloads-generator Log4Shell-obfuscated-payloads-generator can generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection. The design idea of ​​Log4Shell-obfuscated-payloads-generator Installation git clone...

burpfox

🦊 BurpFox A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow. Features 🎯 Right-click scanning - Scan requests directly from Proxy History or Repeater. ⚙️ Full Dalfox options - Context-aware, WAF evasion, Blind XSS and more. Prerequisites 1. Install Dalfox...

CVE-2025-29927

CVE-2025-29927 - Next.js Middleware Authentication Bypass Advanced Bypass 🔥 Overview An advanced PoC for CVE-2025-29927 , allowing authentication bypass in Next.js Middleware by manipulating specific headers. This template enhances WAF evasion and security bypass techniques. 🚀 Features ✅...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Scanner professionnel de vulnérabilité RSC RCE pour Next.js – CVE-2025-66478 🎯 Aperçu React2Shell Ultimate est un scanner de vulnérabilité complet pour la CVE-2025-66478 – une vulnérabilité critique d’exécution de code à distance RCE affectant les applications...

pymultitor

PyMultiTor Proxy Tor multi‑threadé en Python, Avez‑vous déjà voulu être à deux endroits différents en même temps ? Quand je me suis posé cette question, j'ai en fait commencé à développer cette solution dans mon esprit. Lors de tests d'intrusion, il y a souvent des problèmes causés par des...

bantam

Bantam Un outil avancé de gestion de backdoor PHP, avec une empreinte serveur légère, une communication multi-thread et un outil de génération et d'obscurcissement de payload avancé. Il propose un chiffrement de bout en bout avec des clés de chiffrement uniques par requête et un streaming de...

log4j-scan

log4j-scan Un scanner entièrement automatisé, précis et complet pour trouver des hôtes log4j vulnérables Fonctionnalités Prise en charge des listes d'URL. Fuzzing pour plus de 60 en-têtes de requête HTTP pas seulement 3-4 en-têtes comme dans les outils précédemment vus. Fuzzing pour les paramètre...

CVE-2023-5561-POC-Updated

CVE-2023-5561-POC-Updated This repository contains a modified version of the original Proof-of-Concept PoC for CVE-2023-5561. The original PoC, which can be found here, sends a high volume of requests in parallel, which may trigger Web Application Firewalls WAFs or cause the server to block the...

Awesome-Pentest

Awesome Pentest Tools and Resources A list of awesome penetration testing tools and resources. Contents Antivirus Evasion Tools AWS File Viewers and Pretty Printers Hardware Security CAN Bus Logic Analyzers Misc Hardware Tools Hash Cracking Tools Hex Editors Lab Setup Mobile Security Android iOS...

burp-awesome-tls

Awesome TLS This extension hijacks Burp's HTTP and TLS stack, allowing you to spoof any browser TLS fingerprint JA3. It boosts the power of Burp Suite while reducing the likelihood of fingerprinting by various WAFs like CloudFlare, PerimeterX, Akamai, DataDome, etc. This extension works without...

BurpSuiteHTTPSmuggler

Burp Suite HTTP Smuggler A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques. This extension has been developed by Soroush Dalili @irsdl from NCC Group. The initial release v0.1 only supports the Encoding capability that can be quite...

Fortinet FortiWeb Content-Encoding WAF Evasion (FG-IR-26-157)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-157 advisory. - A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5,...

erebus

EREBUS Web application security assessment framework. For...

xss

CSS Style Sheet Mutation alert"This is a test" alert"...

RedTrace

RedTrace v3.0 — Web Vulnerability Scanner Professional-grad...

Exploit for Deserialization of Untrusted Data in Facebook React

Chain Reaction High-Performance Rust Scanner for React Serv...

Server-Side Request Forgery (SSRF)

Astro is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insecure and unsanitized use of the x-forwarded-proto and x-forwarded-port headers when constructing URLs, which allows an attacker to manipulate these headers to bypass protected routes, poison caches, trigger...

SMTP2GO BBP: Origin IP found, WAF Cloudflare Bypass

Description: I have discovered that the http://172.105.190.180/login/ site exposed it's IP which could allow bypassing of anti-DDoS mechanisms i.e you are using Cloudflare for protection. For Originate IP address which I found from https://search.censys.io/ By using these IP address as a resolver...

CVE-2021-45468: Inconsistent Interpretation of HTTP Requests

Imperva Web Application Firewall WAF before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WAF security controls and send malicious HTTP POST requests to web servers behind the WAF...