A front-end JavaScript toolkit for creating DNS rebinding attacks.
A DNS rebinding attack framework.
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part
Escalate your SSRF vulnerabilities on Modern Cloud Environments. surf allows you to filter a list of hosts, returning a list of viable SSRF candidates.
الميزات الرئيسية لـ assetnote/surf هي: Server Side Request Forgery, Specialized Web Attacks.
تشمل البدائل مفتوحة المصدر لـ assetnote/surf: nccgroup/singularity — A DNS rebinding attack framework. brannondorsey/dns-rebind-toolkit — A front-end JavaScript toolkit for creating DNS rebinding attacks. voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… damian89/extended-ssrf-search — Smart ssrf scanner using different methods like parameter brute forcing in post and get... brannondorsey/whonow — A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53).