Check your WAF before an attacker does

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Utility for creating ZipSlip archives

A Deliberately Insecure Web Application

Simple machine learning based web application firewall (WAF) created in python

Zen by Aikido protects your node app against attacks with one line of code. Get peace of mind— at runtime.

Burpsuite Plugin to detect Directory Traversal vulnerabilities

μετάμάσκα - malevolent payload classifier

Fast Path Traversal exploitation tool

Dump files via Directory Traversal, LFI, Arbitrary File Read in a breeze with the help of ffuf

An API for escaping different kind of queries

A (purpousely) vulnerable, social-media-like, django web application

DirTras is an automated directory/path traversal exploitation tool.

Perform With Shell Scanner Using Path Traversal & Strings

Path Traversal On The "/Modules/Messaging/" Endpoint In Splunk Enterprise On Windows

🤨🔎 A simple path traversal checker made with Rust. Useful for APIs that serve dynamic files.

CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited