An IIS short filename enumeration tool

iis高版本短文件名猜解脚本，适用于iis7.5~10.x版本的iis中间件。

navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities

Automatic SSTI detection tool with interactive interface

API Security Project aims to present unique attack & defense methods in API Security field

Reverse engineering JavaScript and CSS sources from sourcemaps

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Template Nuclei SSTI

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()