endsfuzzer
ameenalkerdy/endsfuzzerFuzz a list of domains for specific endpoints
fuzzinginformation-gatheringweb-security
ameenalkerdy/endsfuzzerFuzz a list of domains for specific endpoints
ethicalhackingplayground/wordlistgenGenerates target specific word lists for Fuzzing with fuff
ayoubfathi/leaky-pathsA collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could…
anmolksachan/thetimemachineWeaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
nu11secur1ty/insectHigh-performance web path discovery and directory brute-forcing tool. Discovers hidden files, directories, and endpoints using customizable…
anof-cyber/paraforgeA BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
rapiddns/afuzzAutomated web path fuzzing tool that detects hidden directories, files, and endpoints using intelligent language detection, blacklist/whitelist…
xnl-h4ck3r/gap-burp-extensionBurp Extension to find potential endpoints, parameters, and generate a custom target wordlist
edoardottt/cariddiTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
hwmex0/cve-2024-43044The script checks Jenkins endpoints for CVE-2024-43044 by retrieving the Jenkins version from the innstance and comparing it against known vulnerable…
mmioimm/cve-2020-14882Python exploit script for CVE-2020-14882 targeting Oracle WebLogic Server. Executes remote commands via crafted HTTP requests to unauthenticated…
baktistr/cve-2026-23550-pocBash-based proof-of-concept tester for CVE-2026-23550. Checks WordPress modular connector login endpoints for admin cookie issuance and verifies…
ryan412/cve-2022-48197Reflected XSS vulnerability disclosure for Yahoo YUI library, with proof-of-concept exploits across multiple PHP endpoints for security testing and…
aureum01/cve-2023-23752A bash automation that exploits the vulnerable endpoints for the Joomla! API 4.0 - 4.2.7
aabbcc19191/cve-2020-13935Exploit for Apache Tomcat WebSocket vulnerability CVE-2020-13935, allowing testing of WebSocket endpoints for denial-of-service vulnerability.
bishopfox/sjA tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
fixyourface/springbreakpocPoC for SpringBreak (CVE-2017-8046)
abuyazeen/cve-2021-43798-grafana-path-traversal-testerAutomated path traversal testing tool for Grafana plugin endpoints using curl and Bash.