Check your WAF before an attacker does

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Utility for creating ZipSlip archives

Fast Path Traversal exploitation tool

Dump files via Directory Traversal, LFI, Arbitrary File Read in a breeze with the help of ffuf

Web scraping | Website cloner | Path Traversal Scanner

A (purpousely) vulnerable, social-media-like, django web application

LFI2Keys automates the process of extracting user accounts from /etc/passwd and attempts to locate private SSH keys through LFI

Perform With Shell Scanner Using Path Traversal & Strings

Proof of Concept for CVE-2024-36991. Path traversal for Splunk versions below 9.2.2, 9.1.5, and 9.0.10 for Windows which allows arbitrary file read.

WAFManis is a Protocol-Level WAF Evasion Fuzzing Tool that automates the discovery of evasion vulnerabilities in Web Application Firewalls (WAFs) by fuzzing HTTP requests to identify potential bypass techniques.

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

Check Point Security Gateway (LFI)

Path Traversal automation vulnerability scanner tool.

A powerful, multi-threaded scanner designed for bug bounty hunters and penetration testers to detect exposed or sensitive paths hidden via robots.txt. Supports HTTP/2, advanced 401/403 bypass techniques, multiple HTTP methods, and outputs in JSON/CSV formats.

Linux Path Traversal

An autonomous robot designed to navigate a grid, pick up and deliver virtual packages, and respond to traffic signals for an efficient courier service.

This code is the demonstration of using path traversal to exploit a poorly coded upload file fuction for malicious code injection on to a web server.