CVE-2024-26144-test
gmo-ierae/cve-2024-26144-testTest tool for CVE-2024-26144 that checks if web servers and CDNs improperly cache HTTP responses containing Set-Cookie headers, revealing cache…
misconfigurationvulnerability-analysisweb-security
gmo-ierae/cve-2024-26144-testTest tool for CVE-2024-26144 that checks if web servers and CDNs improperly cache HTTP responses containing Set-Cookie headers, revealing cache…
spyboy-productions/websecprobeSecurity testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.
trufflesecurity/of-corsAutomated CORS misconfiguration discovery tool using typosquatting domains and browser service workers to probe internal networks of bug bounty…
yousseflahouifi/dbdtctPython-based scanner that detects debug mode misconfigurations in web applications using multiple HTTP methods and fingerprinting techniques to…
santandersecurityresearch/corsair_scanAutomated CORS misconfiguration scanner that tests Origin header injection, wildcard reflection, and credential leakage across web applications and…
aquasecurity/chain-benchAudits software supply chain security compliance against the CIS benchmark, scanning SCM settings, branch protections, dependencies, and CI/CD…
burjoy/cve-2024-40275_scannerScanner for CVE-2024-40725 Apache HTTP Server source-code disclosure; probes direct and subrequest paths, fingerprints affected versions, and outputs…
shivangx01b/corsmeCross Origin Resource Sharing MisConfiguration Scanner
mbanyamer/cve-2026-27579-collabplatform-appwrite-cors-misconfigurationExploit PoC for CVE-2026-27579, a CORS misconfiguration in Appwrite backend, demonstrating credentialed account data theft via malicious phishing…
hakaioffsec/navgixMulti-threaded Go tool to detect nginx alias traversal vulnerabilities using heuristic and brute-force techniques for identifying vulnerable…
lc/theftfuzzerTheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
raffaele-forte/climberCheck UNIX/Linux systems for privilege escalation
smaranchand/buckyBucky (An automatic S3 bucket discovery tool)
m-q-t/ingressnightmare-detection-pocProof-of-Concept Tool to detect IngressNightmare (CVE-2025-1974) via (non-intrusive) active means.
nitrado/cve-2017-9798Checks a shared hosting environment for CVE-2017-9798
infiniroot/nginx-mitigate-log4shellMitigate log4shell (CVE-2021-44228) vulnerability attacks using Nginx LUA script
alexandreheroux/fix-cve-2021-44228Apply class remove process from ear/war/jar/zip archive, see https://logging.apache.org/log4j/2.x/
hazemkya/cve-2024-3094-checkerBash script to detect and remediate CVE-2024-3094, a critical supply-chain vulnerability in the XZ Utils library, with automatic safe version…