icon icon icon icon icon icon icon

back to use cases

Vulnerability Scanners Store

Scan your web application for vulnerabilities.

Workflows

CVE-2021-42013 & CVE-2021-41773
Workflow  ●  Published by zaric
Do check and verify if vulnerable for CVE-2021-42013 & CVE-2021-41773 (Apache)
Vulnerabilities
PHP File Upload Bypass Generator
Workflow  ●  Published by zaric
Using a reverse shell template create different variations of file-upload bypasses for PHP Applications.
Vulnerabilities
CVE-2021-41773
Workflow  ●  Published by celesiantrickest
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41773
Vulnerabilities
Open Redirect Finder
Workflow  ●  Published by celesiantrickest
Get a list of URLs from WaybackMachine and scan for open redirects
Vulnerabilities
CVEs
Workflow  ●  Published by trickest-mhmdiaa
Almost every publicly available CVE PoC - https://github.com/trickest/cve
Vulnerabilities
XSS Finder
Workflow  ●  Published by trickest-mhmdiaa
Get all Wayback URLs for the domain and find XSS.
Vulnerabilities

Tools you can use:

bypass-403
Workflow  ●  Published by trickest-mhmdiaa
Go script for bypassing 403 forbidden
Vulnerabilities
commix
Workflow  ●  Published by trickest
Commix (short for [comm]and [i]njection e[x]ploiter) is an open-source penetration testing tool, written by Anastasios Stasinopoulos (@ancst), that automates the detection and exploitation of command injection vulnerabilities.
Vulnerabilities
crlfmap
Workflow  ●  Published by trickest
CRLFMap is a tool to find HTTP Splitting vulnerabilities
Vulnerabilities
cve-2018-15473
Workflow  ●  Published by trickest-mhmdiaa
Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473
Vulnerabilities
dalfox
Workflow  ●  Published by trickest
DalFox is a fast, powerful parameter analysis and XSS scanner, based on a golang/DOM parser.
Vulnerabilities
dsss
Workflow  ●  Published by trickest
Damn Small SQLi Scanner (DSSS) is a fully functional SQL injection vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie.
Vulnerabilities
dsxs
Workflow  ●  Published by trickest
Damn Small XSS Scanner (DSXS) is a fully functional Cross-site scripting vulnerability scanner (supporting GET and POST parameters) written in under 100 lines of code.
Vulnerabilities
fdsploit
Workflow  ●  Published by trickest
FDsploit can be used to discover and exploit Local/Remote File Inclusion and directory traversal vulnerabilities automatically.
Vulnerabilities
findom-xss
Workflow  ●  Published by trickest
FinDOM-XSS with file input. FinDOM-XSS is a tool that allows you to finding for possible and/ potential DOM based XSS vulnerability in a fast manner.
Vulnerabilities
http-request-smuggling
Workflow  ●  Published by trickest-mhmdiaa
http-request-smuggling is a python tool used to detect if target/list of targets are vulnerable against HTTP Request Smuggling vulnerability
Vulnerabilities
jwt-tool
Workflow  ●  Published by trickest-mhmdiaa
jwt_tool.py is a toolkit for validating, forging, scanning, and tampering JWTs (JSON Web Tokens).
Vulnerabilities
kxss
Workflow  ●  Published by trickest
Find unfiltered special characters from urls.
Vulnerabilities
log4j-scan
Workflow  ●  Published by trickest-mhmdiaa
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Vulnerabilities
nosqli
Workflow  ●  Published by trickest
A fast NoSQL scanner and injector. For finding sites vulnerable to NoSQL injection, Mongo in particular.
Vulnerabilities
openredirex
Workflow  ●  Published by trickest
Asynchronous Open redirect Fuzzer. Key features are: taking a url or list of urls and fuzzes them for Open redirect issues, specifying own payloads through 'payloads.txt' and showing Location header history (if any).
Vulnerabilities
oralyzer
Workflow  ●  Published by trickest
Oralyzer, a simple python script that is capable of finding the open redirection vulnerability in a website. It does that by fuzzing the url i.e. provided as the input.
Vulnerabilities
smuggler
Workflow  ●  Published by trickest-mhmdiaa
An HTTP Request Smuggling / Desync testing tool written in Python 3
Vulnerabilities
sqlmap
Workflow  ●  Published by trickest
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers
Vulnerabilities
ssrfuzz
Workflow  ●  Published by trickest-mhmdiaa
SSRFuzz is a tool to find Server Side Request Forgery vulnerabilities
Vulnerabilities
subzy
Workflow  ●  Published by trickest
Subzy is subdomain takeover tool which works based on matching response fingerprings from can-i-take-over-xyz.
Vulnerabilities

GET STARTED WITH TRICKEST TODAY

Fill out our early access form to put yourself on the waitlist and stay in the loop.

Start Hacking for Free