Commix-Testbed
A collection of real-world scenarios, vulnerable to command injection flaws, used to evaluate the detection and exploitation abilities of commix. Regular injection scenarios. Cookie injection scenarios. User-Agent injection scenarios. Referer injection scenarios. Weak filters scenarios. Hints: Screenshot Installation: Download commix-testbed by cloning the official Git repository: git clone https://github.com/commixproject/commix-testbed.git commix-testbed ... or use the dockerized version of commix-testbed. Bugs and Enhancements: For bug reports or enhancements regarding commix tesbed, please open an issue.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Simple script to check a domain's email protections and identify vulnerabilities.
LeakIX is a red-team search engine that indexes mis-configurations and vulnerabilities online.
An AI-powered Google Dorking tool that helps create effective search queries to uncover sensitive information on the internet.
A search engine for the Internet of Things (IoT) that provides real-time information about connected devices.
All-in-one vulnerability intelligence platform for prioritizing remediation efforts and driving security strategies.
Automate OSINT for threat intelligence and attack surface mapping with SpiderFoot.
Crt.sh is a website that allows users to search for SSL/TLS certificates of a targeted domain, providing transparency into certificate logs.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.