How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tool to searching sentry config on page or in javascript files and check blind SSRF
The main features of xawdxawdx/sentryssrf are: Server Side Request Forgery.
Projects with overlapping indexed features include: daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… voorivex/pentest-guide — This project is a comprehensive web application penetration testing guide and vulnerability research framework. It… brannondorsey/whonow — A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53). daeken/httprebind — Automatic tool for DNS rebinding-based SSRF attacks. damian89/extended-ssrf-search — Smart ssrf scanner using different methods like parameter brute forcing in post and get... brannondorsey/dns-rebind-toolkit — A front-end JavaScript toolkit for creating DNS rebinding attacks.
