How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
A front-end JavaScript toolkit for creating DNS rebinding attacks.
A DNS rebinding attack framework.
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part
Escalate your SSRF vulnerabilities on Modern Cloud Environments. surf allows you to filter a list of hosts, returning a list of viable SSRF candidates.
The main features of assetnote/surf are: Server Side Request Forgery, Specialized Web Attacks.
Projects with overlapping indexed features include: nccgroup/singularity — A DNS rebinding attack framework. brannondorsey/dns-rebind-toolkit — A front-end JavaScript toolkit for creating DNS rebinding attacks. voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… damian89/extended-ssrf-search — Smart ssrf scanner using different methods like parameter brute forcing in post and get... brannondorsey/whonow — A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53).