off-by-slash
by bayotop
Burp extension to detect alias traversal via NGINX misconfiguration at scale.
AI summary
URL generator and tester
Automatically detects alias traversal vulnerabilities in NGINX configurations by generating and testing malicious URLs.
- stars
- 254
- forks
- 36
- watching
- 7
- awesome list
- 1
Similar projects
Found by comparing what the projects do, not just their names.
Vulnerability scanner
An extension for Burp Suite that identifies potential security vulnerabilities in web applications by analyzing endpoints, parameters, and generating custom target wordlists.
Vulnerability scanner
Automatically scans endpoints for potential SQL Truncation vulnerabilities by fuzzing request parameters
Vulnerability scanner
Automated vulnerability detection tool for web applications
Vulnerability scanner
Automated tool for detecting cross-site scripting (XSS) and SQL injection vulnerabilities in web applications.
URL tester
Automatically appends dot-dot-slash to URLs to test for path traversal vulnerabilities.
Vulnerability scanner
A tool that searches for vulnerabilities in web applications using an external API
Website crawler
Generates a sitemap of a website using Wayback Machine
Vulnerability scanner
A tool that allows users to enhance and customize the vulnerability scanning capabilities of Burp Suite using a graphical interface.
Vulnerability scanner
A Burp extension that scans application traffic for signs of vulnerabilities and potential attack targets
Vulnerability scanner
A collection of tools and methodologies for identifying vulnerabilities in web applications
bugcrowd/hunt2.2K
Vulnerability scanner
An extension for Burp Suite that provides a structured approach to identifying and testing common vulnerability parameters.
Redirect injector
A Burp Suite extension to enhance scanning by injecting HTTP redirects into responses from specific APIs.
Vulnerability scanner
An extension for Burp Suite that scans for unknown classes of injection vulnerabilities using a novel approach
Vulnerable JS library scanner
A tool that integrates with Burp and ZAP to identify vulnerable JavaScript libraries
Vulnerability scanner
An extension that identifies argument injection vulnerabilities in web applications using payloads and detection techniques
Featured in 1 awesome list
Each link jumps to the spot where the list mentions off-by-slash.
