Skip to content

@Server-Side-Injection-Tools Server-Side-Injection-Tools

Change the repository type filter

All

    Repositories list

    19 repositories

    • Gopherus

      Public
      This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
      Python
      •
      MIT License
      •367•0•0•0•Updated Oct 10, 2019Oct 10, 2019

    • commix

      Public
      Automated All-in-One OS command injection and exploitation tool.
      Python
      •
      Other
      •808•0•0•0•Updated Oct 10, 2019Oct 10, 2019

    • subjack

      Public
      Subdomain Takeover tool written in Go
      Go
      •
      Apache License 2.0
      •333•0•0•0•Updated Oct 10, 2019Oct 10, 2019

    • SSRFmap

      Public
      Automatic SSRF fuzzer and exploitation tool
      Python
      •
      MIT License
      •513•0•0•0•Updated Oct 4, 2019Oct 4, 2019

    • dotdotpwn

      Public
      DotDotPwn - The Directory Traversal Fuzzer
      Perl
      •
      GNU General Public License v3.0
      •176•0•0•0•Updated Sep 17, 2019Sep 17, 2019

    • fimap

      Public
      fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
      Python
      •
      GNU General Public License v2.0
      •99•0•0•0•Updated Aug 10, 2019Aug 10, 2019

    • Kadimus

      Public
      Kadimus is a tool to check sites to lfi vulnerability , and also exploit it...
      C
      •
      MIT License
      •129•0•0•0•Updated Aug 6, 2019Aug 6, 2019

    • ScanQLi

      Public
      SQLi scanner to detect SQL vulns
      Python
      •
      GNU General Public License v3.0
      •64•0•0•0•Updated Jul 15, 2019Jul 15, 2019

    • takeover

      Public
      Sub-Domain TakeOver Vulnerability Scanner
      Python
      •227•0•0•0•Updated Jul 2, 2019Jul 2, 2019

    • waybackSqliScanner

      Public
      Python
      •63•0•0•0•Updated Jun 6, 2019Jun 6, 2019

    • sqlmate

      Public
      A friend of SQLmap which will do what you always expected from SQLmap.
      Python
      •
      GNU General Public License v3.0
      •117•0•0•0•Updated May 5, 2019May 5, 2019

    • Blisqy

      Public
      Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
      Python
      •104•0•0•0•Updated Mar 24, 2019Mar 24, 2019

    • bbqsql

      Public
      SQL Injection Exploitation Tool
      Python
      •
      Other
      •188•0•0•0•Updated Jan 4, 2019Jan 4, 2019

    • SSRF-Testing

      Public
      SSRF (Server Side Request Forgery) testing resources
      Python
      •477•0•0•0•Updated Nov 16, 2018Nov 16, 2018

    • LFISuite

      Public
      Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
      Python
      •
      GNU General Public License v3.0
      •389•0•0•0•Updated May 30, 2018May 30, 2018

    • ssrf_proxy

      Public
      SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.
      Ruby
      •
      MIT License
      •75•0•0•0•Updated Jan 1, 2018Jan 1, 2018

    • bsql

      Public
      bsql hacker tool
      5•0•0•0•Updated Nov 8, 2017Nov 8, 2017

    • Panoptic

      Public
      Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through path traversal vulnerabilities.
      Python
      •
      MIT License
      •78•0•0•0•Updated Sep 27, 2017Sep 27, 2017

    • LFI-Scanner

      Public
      Python
      •5•0•0•0•Updated Aug 24, 2017Aug 24, 2017