A DNS rebinding attack framework.
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part
This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
The main features of tarunkant/gopherus are: Exploitation Tools, Server Side Request Forgery, Web Application Exploitation.
Open-source alternatives to tarunkant/gopherus include: mzfr/liffy — Local file inclusion exploitation tool. nccgroup/singularity — A DNS rebinding attack framework. voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… brannondorsey/whonow — A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53). beefproject/beef — BeEF is a modular security testing environment designed for browser exploitation and web application auditing. It…
