Predrag Cujanović

SSRF-Testing. SSRF (Server Side Request Forgery) testing resources

Open-Redirect-Payloads. Open Redirect Payloads

Markdown-XSS-Payloads. XSS payloads for exploiting Markdown syntax

CRLF-Injection-Payloads. Payloads for CRLF Injection

Content-Bruteforcing-Wordlist. Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

subdomain-bruteforce-list. subdomain bruteforce list

Virtual-host-wordlist. Virtual host wordlist

CVE-2016-8610-PoC. CVE-2016-8610 (SSL Death Alert) PoC

Linux-default-files-images-location. Default Linux files/images location

XXE-FTP-HTTP-Server. Ruby

dirsearch-wordlist. Serbian/English wordlist for https://github.com/maurosoria/dirsearch

nginx-dynamic-tls-records-patch. Add TLS Dynamic Record Resizing to Nginx

grsecurity-patches. Unofficial grsecurity patch archive https://grsecurity.net

nginx-http2-spdy-patch. Patch to make NGINX support HTTP/2 and SPDY simultaneously

XSS-Testing-Page. PHP

ssspl. SSS is a simple socks server written in perl that implements the SOCKS v5 protocol.

params.

llm-sast-scanner. A SAST skill that gives AI coding agents structured vulnerability detection across 103 vulnerability classes.

resolvers. Free DNS resolvers

goaltdns. Go

public-dns-resolvers. List of periodically validated public DNS resolvers

burp-copy-to-clipboard-for-vulnreport. Burp Copy to Clipboard for VulnReport

blooming-password. Blooming Password

TCP-Starvation. Python

Internet-Explorer-11-Content-Type-JSON-bug. Internet Explorer 11 bug to exploit application JSON response to XSS

vulnreport. Open-source pentesting management and automation platform by Salesforce Product Security

Content-Type-Text-Plain-Considered-Harmful. Content-Type Text/Plain Considered Harmful

autochrome. This tool downloads, installs, and configures a shiny new copy of Chromium.

hosts-file.net.

cujanovic.

nginx_upstream_check_module. Health checks upstreams for nginx，support dynamic health check interface for adding servers, transplat from tengine based on upstream_check_module

cf-pngcrush-patch. pngcrush fork for CF - patch

Memcrashed-DDoS-Exploit. DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

openvpn. Shell

ffmpeg-avi-m3u-xbin. Python

xip.ninja. xip.ninja : PowerDNS pipe backend adapter powering xip.ninja