path-traversal

There are 1 repository under path-traversal topic.

nemesida-waf / waf-bypass
Check your WAF before an attacker does
waf python3 bypass python rce xss waf-bypass-tool api-security-testing lfi nosql-injection path-traversal rfi sqli-injection graphql-injection ssti waf-testing
Language:Python 1444
chrispetrou / FDsploit
File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.
exploitation enumeration owasp security-tools lfi rfi directory-traversal path-traversal web-security security oscp fuzzing file-include lfi-shells lfi-vulnerability inclusion directory-traversal-vulnerability penetration-testing pentesting hacking
Language:Python 273
bayotop / off-by-slash
Burp extension to detect alias traversal via NGINX misconfiguration at scale.
burpsuite nginx path-traversal
Language:Python 264
Vailyn
VainlyStrain / Vailyn
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
websecurity information-leak exploitation vulnerability-scanners directory-traversal path-traversal pentest-tool websec vulnerability-assessment penetration-testing filter-evasion vulnerability-detection pentesting lfi lfi-shells lfi-exploitation security local-file-inclusion rce takeover
Language:Python 200
AikidoSec / firewall-node
Zen protects your Node app against attacks with one line of code. Get peace of mind— at runtime.
attack-defense firewall nodejs nosql-injection rasp security path-traversal sql-injection shell-injection
Language:TypeScript 116
usdAG / slipit
Utility for creating ZipSlip archives
zipslip zip-slip zip tar path-traversal archive tarball zip-archive symlinks symbolic-links
Language:Python 79
snsttr / diwa
A Deliberately Insecure Web Application
hacking security security-threats webappsec infosec owasp-top-10 education training learn practice web-security xss sql-injection csrf session-hijacking session-fixation path-traversal sensitive-data-exposure brute-force-attacks local-file-inclusion
Language:PHP 69
AikidoSec / firewall-java
Zen protects your Java app against attacks with one line of code. Get peace of mind— at runtime.
firewall path-traversal rasp security shell-injection sql-injection
Language:Java 67
ML-based-WAF
vladan-stojnic / ML-based-WAF
Simple machine learning based web application firewall (WAF) created in python
sqli xss path-traversal sql-injection cross-site-scripting cmdi command-injection parameter-tampering http ml machine-learning svm tf-idf decision-trees waf web-application-firewall python sklearn scapy dash
Language:Jupyter Notebook 60
BitTheByte / BitTraversal
Burpsuite Plugin to detect Directory Traversal vulnerabilities
burpsuite burp-extensions java burp-plugin burpsuite-extender bugbounty traversal path-traversal web
Language:Java 28
dogancanbakir / metamaska
μετάμάσκα - malevolent payload classifier
command-injection cybersecurity hacktoberfest ml path-traversal python sql-injection vulnerability xss
Language:Jupyter Notebook 24
treddis / dotdotfarm
Fast Path Traversal exploitation tool
appsec fuzzer lfi path-traversal pentesting python security web
Language:Python 21
opabravo / dfuf
Dump files via Directory Traversal, LFI, Arbitrary File Read in a breeze with the help of ffuf
ctf-tools directory-traversal dumper file-inclusion pentest ctf oscp penetration-testing pentesting-tools exfiltration lfi local-file-inclusion path-traversal
Language:Python 18
sp34rh34d / WebRunner
Web scraping | Website cloner | Path Traversal Scanner
email-enumeration email-extractor scraping url-extractor url-parser ctf pentesting regexp python python3 crewler clone-website cloner directory-traversal lfi local-file-inclusion path-traversal
Language:Python 16
polarspetroll / EscapeAPI
An API for escaping different kind of queries
api directory-traversal os-command-injection path-traversal security xss
Language:Ruby 14
jvlsg / HeadPage
A (purpousely) vulnerable, social-media-like, django web application
damn-vulnerable-web-application damn-vulnerable owasp-top-10 sql-injection xss rce open-redirect path-traversal
Language:Python 12
Mr-xn / CVE-2024-36991
Path Traversal On The "/Modules/Messaging/" Endpoint In Splunk Enterprise On Windows
cve cve-2024 cve-2024-36991 path-traversal splunk
9
ColdFusionX / CVE-2021-34429
POC for CVE-2021-34429 - Eclipse Jetty 11.0.5 Sensitive File Disclosure
cve-2021-34429 web-xml path-traversal docker exploit eclipse jetty
Language:Java 6
path_trav
gatomod / path_trav
🤨🔎 A simple path traversal checker made with Rust. Useful for APIs that serve dynamic files.
fs path path-traversal rust security
Language:Rust 6
slicingmelon / gobypass403
A powerful WAF (HTTP 403/401) and URL parser bypass tool developed in Go, designed to preserve exact URL paths and structures during testing.
403-bypass cli golang path-traversal penetration-testing waf-bypass websecurity access-control-bypass acl-bypass
Language:Go 6
verylazytech / CVE-2024-45241
centeralsquare crywolf cve-2024-45241 exploit path-traversal poc
6
E1A / LFI2Keys
LFI2Keys automates the process of extracting user accounts from /etc/passwd and attempts to locate private SSH keys through LFI
lfi lfi-exploitation looting path-traversal path-traversal-exploitation
Language:Python 5
Kasim200429 / GoBypass403
GoBypass403 is a tool designed to help security professionals test and bypass 403 Forbidden errors on web applications. It streamlines the penetration testing process, making it easier to identify vulnerabilities and enhance web security. 🛠️💻
access-bypass access-control bugbounty ethical-hacking-tools http-headers http-security path-traversal penetration-testing security security-scanner web-pentesting web-security web-vulnerability
Language:Go 5
ThatNotEasy / Shell-Scanner
Perform With Shell Scanner Using Path Traversal & Strings
webshell-scan path-traversal php-malware-scanner
Language:Python 5
clevernyyyy / zip-slip-poc
Quick and Dirty POC for Zip Slip
path-traversal vulnerability zip-slip
Language:JavaScript 4
gunzf0x / CVE-2024-36991
Proof of Concept for CVE-2024-36991. Path traversal for Splunk versions below 9.2.2, 9.1.5, and 9.0.10 for Windows which allows arbitrary file read.
cve-2024-36991 ethical-hacking path-traversal pentesting splunk
Language:Python 4
CVE-2020-29134
Ls4ss / CVE-2020-29134
Exploit CVE-2020-29134 - TOTVS Fluig Platform - Path Traversal
cve cwe-22 exploit fluig hacking path-traversal payload pentest pentest-tool totvs
Language:Shell 4
sec-it / exploit-CVE-2019-14530
OpenEMR < 5.0.2 - (Authenticated) Path Traversal - Local File Disclosure
cve-2019-14530 exploit local-file-disclosure openemr openemr-exploit openemr-vulnerability path-traversal poc
Language:Ruby 4
twseptian / cve-2021-41773
CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited
cve-2021-41773 apache path-traversal vulnerability shodan shodan-cli
4
FOGSEC / Mobile-Security-Framework-MobSF
Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.
analysis malware mobile security framework android ios windows automation automated auto-exploit auto-exploiter dynamic-analysis mobile-api xxe path path-traversal red-team red team
Language:Python 3
mrmtwoj / WAFManis
WAFManis is a Protocol-Level WAF Evasion Fuzzing Tool that automates the discovery of evasion vulnerabilities in Web Application Firewalls (WAFs) by fuzzing HTTP requests to identify potential bypass techniques.
bypass nosql nosqlinjection os os-command-injection path-traversal sql sqlinjection waf xml xmlinputformat xss xss-attacks xss-vulnerability xxe xxe-injection bypasswaf nosqlpayload sql-injection
Language:Python 3
luismiguelcasadodiaz / 42Barcelona_CiberDiscovery
cibersecurity decoding directory-listing hashing path-traversal sql-injection
2
TheRedP4nther / LFI-aiohttp-CVE-2024-23334-PoC
Bash script to automate Local File Inclusion (LFI) attacks on aiohttp server version 3.9.1.
aiohttp aiohttp-server bash cve exploit lfi local-file-inclusion path-traversal shell
Language:Shell 2
Francesco-Sovrano / llms_for_vulnerability_detection_are_lost_in_the_end
Replication package of the paper 'Large Language Models for In-File Vulnerability Localization are "Lost in the End"' (https://doi.org/10.1145/3715758)
ai-security bug-localization code-in-the-haystack cwe cyber-security deep-learning gpt in-file-vulnerability-localization large-language-models llama llm-research llm-security mixtral path-traversal software-analysis software-security sql-injection statistical-analysis vulnerability-detection xss
Language:Jupyter Notebook 1
pwnosec / ApachSAL
Path Traversal automation vulnerability scanner tool.
path-traversal path-traversal-automation path-traversal-exploitation vulnerability-detection vulnerability-exploitation
Language:Python 1
XploitPoy-777 / RoboSploit
A powerful, multi-threaded scanner designed for bug bounty hunters and penetration testers to detect exposed or sensitive paths hidden via robots.txt. Supports HTTP/2, advanced 401/403 bypass techniques, multiple HTTP methods, and outputs in JSON/CSV formats.
access-control bug-bounty-tools cybersecuritytools ethicalhacking path-traversal penetration-testing-tools red-team-tools robots-txt-file-scanner robots-txt-monitoring robots-txt-scanner security-auditing-tool security-automation security-research vulnerability-scanning-tools robosploit robots-tester-pro
Language:Python 1