icon icon icon icon icon icon icon

back to use cases

Vulnerability Scanners Library

Scan your web application for vulnerabilities.

Workflows

CVE-2022-42889
Workflow  ●  Published by kljunowsky
Test a list of hosts for CVE-2022-42889
Vulnerabilities
CVE-2022-41040
Workflow  ●  Published by kljunowsky
Test a list of hosts for CVE-2022-41040 which is an SSRF vulnerability affecting several versions of Microsoft Exchange Server
Vulnerabilities
CVE-2022-36804
Workflow  ●  Published by kljunowsky
Test a list of hosts for CVE-2022-36804 which could allow remote attackers to execute arbitrary code on Atlassian Bitbucket Server and Data Center installations.
Vulnerabilities
CVE-2021-42013 & CVE-2021-41773
Workflow  ●  Published by zaric
Do check and verify if vulnerable for CVE-2021-42013 & CVE-2021-41773 (Apache)
Vulnerabilities
PHP File Upload Bypass Generator
Workflow  ●  Published by zaric
Using a reverse shell template create different variations of file-upload bypasses for PHP Applications.
Vulnerabilities
CVE-2021-41773
Workflow  ●  Published by trickest-mhmdiaa
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773
Vulnerabilities
Open Redirect Finder
Workflow  ●  Published by trickest-mhmdiaa
Get a list of URLs from WaybackMachine and scan for open redirects
Vulnerabilities
CVEs
Workflow  ●  Published by trickest-mhmdiaa
Almost every publicly available CVE PoC - https://github.com/trickest/cve
Vulnerabilities
XSS Finder
Workflow  ●  Published by trickest-mhmdiaa
Get all Wayback URLs for the domain and find XSS.
Vulnerabilities

Tools you can use:

bypass-403
Workflow  ●  Published by trickest-mhmdiaa
Go script for bypassing 403 forbidden
Vulnerabilities
commix
Workflow  ●  Published by trickest
Commix (short for [comm]and [i]njection e[x]ploiter) is an open-source penetration testing tool, written by Anastasios Stasinopoulos (@ancst), that automates the detection and exploitation of command injection vulnerabilities.
Vulnerabilities
crlfmap
Workflow  ●  Published by trickest
CRLFMap is a tool to find HTTP Splitting vulnerabilities
Vulnerabilities
cve-2018-15473
Workflow  ●  Published by trickest-mhmdiaa
Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473
Vulnerabilities
dalfox
Workflow  ●  Published by trickest
DalFox is a fast, powerful parameter analysis and XSS scanner, based on a golang/DOM parser.
Vulnerabilities
dnsreaper
Workflow  ●  Published by trickest-mhmdiaa
subdomain takeover tool for attackers, bug bounty hunters and the blue team!
Vulnerabilities
dsss
Workflow  ●  Published by trickest
Damn Small SQLi Scanner (DSSS) is a fully functional SQL injection vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie.
Vulnerabilities
dsxs
Workflow  ●  Published by trickest
Damn Small XSS Scanner (DSXS) is a fully functional Cross-site scripting vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code.
Vulnerabilities
fdsploit
Workflow  ●  Published by trickest
FDsploit can be used to discover and exploit Local/Remote File Inclusion and directory traversal vulnerabilities automatically.
Vulnerabilities
find-gh-poc
Workflow  ●  Published by trickest-mhmdiaa
Find CVE PoCs on GitHub
Vulnerabilities
findom-xss
Workflow  ●  Published by trickest
FinDOM-XSS with file input. FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.
Vulnerabilities
http-request-smuggling
Workflow  ●  Published by trickest-mhmdiaa
http-request-smuggling is a python tool used to detect if target/list of targets are vulnerable against HTTP Request Smuggling vulnerability
Vulnerabilities
jwt-tool
Workflow  ●  Published by trickest-mhmdiaa
jwt_tool.py is a toolkit for validating, forging, scanning, and tampering JWTs (JSON Web Tokens).
Vulnerabilities
kxss
Workflow  ●  Published by trickest
Find unfiltered special characters from urls.
Vulnerabilities
log4j-scan
Workflow  ●  Published by trickest-mhmdiaa
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Vulnerabilities
nosqli
Workflow  ●  Published by trickest
A fast NoSQL scanner and injector. For finding sites vulnerable to NoSQL injection, Mongo in particular.
Vulnerabilities
openredirex
Workflow  ●  Published by trickest
Asynchronous Open redirect Fuzzer. Key features are: taking a url or list of urls and fuzzes them for Open redirect issues, specifying own payloads through 'payloads.txt' and showing Location header history (if any).
Vulnerabilities
oralyzer
Workflow  ●  Published by trickest
Oralyzer, a simple python script that is capable of finding the open redirection vulnerability in a website. It does that by fuzzing the url i.e. provided as the input.
Vulnerabilities
smuggler
Workflow  ●  Published by trickest-mhmdiaa
An HTTP Request Smuggling / Desync testing tool written in Python 3
Vulnerabilities
sqlmap
Workflow  ●  Published by trickest
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers
Vulnerabilities

GET STARTED WITH TRICKEST TODAY

Fill out our early access form to put yourself on the waitlist and stay in the loop.

Start Hacking for Free