How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server. The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection str
tplmap is a security tool designed for the detection and exploitation of server-side template injection vulnerabilities. It functions as an automated scanner to identify vulnerable template engine contexts and provides a framework for achieving remote code execution. The tool focuses on translating high-level requests into engine-specific syntax to execute operating system commands and bypass application sandboxes. It further enables remote file system access, allowing users to read, write, and transfer files between a local machine and a target server. Additional capabilities include the ab
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
The main features of aleff-github/wayparam are: Fuzzing and Injection.
Projects with overlapping indexed features include: 0xinfection/xsrfprobe — The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit. bo0om/fuzz.txt — Potentially dangerous files. commixproject/commix — Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It… epinna/tplmap — tplmap is a security tool designed for the detection and exploitation of server-side template injection… fuzzdb-project/fuzzdb — fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a… google/domato — DOM fuzzer.
