Workflows

Use dnsReaper along with a batching pattern to check for DNS takeover en masse

Use dnsX to fetch hosts which respond with either servfail or refused status codes, which may be susceptible to DNS takeover

Test for ways to bypass 403 responses through 6 different techniques that are found to be effective, quick, and capable of scanning numerous endpoints in no time.

Check for CVE-2023-3519, an unauthenticated remote code execution (RCE) vulnerability affecting NetScaler (formerly Citrix) Application Delivery Controller (ADC) and NetScaler Gateway.

Discover a web app's endpoints, diff them, and fuzz newly discovered endpoints for common vulnerabilities like SQL injection, SSRF, XSS, and more.

Scan web servers for vulnerabilities using ASNs as input

Check list of URLs with three different authorization headers for legitimate user, attacker users and anonymous user and compare responses

Scan GitHub Actions misconfiguration for a particular org

Efficiently discover and scan a web app's content for common vulnerabilities. Identify potential SQL injection, SSRF, XSS, and more.

Finding paths and parameters with various techniques and creating a templates for finding LFI,SSRF,XSS,SQLI,RCE based on user-supplied payloads

Fire random SSRF checks through user-supplied parameters for GET and POST requests, additionally crawl the app and add SSRF payload to each GET parameter

Test a list of hosts for CVE-2022-42889

Test a list of hosts for CVE-2022-41040 which is an SSRF vulnerability affecting several versions of Microsoft Exchange Server

Test a list of hosts for CVE-2022-36804 which could allow remote attackers to execute arbitrary code on Atlassian Bitbucket Server and Data Center installations.

Do check and verify if vulnerable for CVE-2021-42013 & CVE-2021-41773 (Apache)

Using a reverse shell template create different variations of file-upload bypasses for PHP Applications.

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773

Scan a list of subdomains for subdomain takeover

Attempts to cause web cache poisoning attacks on several hosts

Get a list of URLs from WaybackMachine and scan for open redirects

Scan a container image for CVEs, exposed secrets, open ports, and more

Use OWASP ZAP to scan an authenticated API

Use OWASP ZAP to spider and scan a website while authenticated

Get all Wayback URLs for the domain and find XSS.

Get all the open-source templates for nuclei with cent, and scan the list of hosts.