Directories ¶ Show internal Expand all Path Synopsis cmd assay command assay/cmd internal core detection/adminpath detection/analysis detection/apispec detection/apiversion detection/auth detection/authbypass403 detection/behavior detection/cachedeception detection/cachekey detection/cachepoisoning detection/cloud detection/cmdi detection/contenttype detection/context detection/cookietoss detection/cors detection/crlf detection/cspaudit detection/csrf detection/cssinj detection/csti detection/csvinj detection/dataexposure detection/depconfusion detection/deser detection/dnsrebinding detection/domclobber detection/domdetect detection/emailinj detection/exposure detection/fileupload detection/graphql detection/graphqladvanced detection/graphqldos detection/grpcreflect detection/h2reset detection/headerinj detection/hosthdr detection/hpp detection/htmlinj detection/http2advanced detection/http2desync detection/http2race detection/idor detection/iistilde detection/injection detection/jkuabuse detection/jndi detection/jsdep detection/jwt detection/jwtadvanced detection/ldap detection/lfi detection/loginj detection/longpwd detection/massassign detection/mfabypass detection/nosql detection/oauth detection/oauthflow detection/oob detection/openapisemantic detection/ormleak detection/paddingoracle detection/passwordreset detection/pathnorm detection/postmsg detection/promptinjection detection/protopollution detection/racecond detection/ratelimit detection/redirect detection/redos detection/rfi detection/samesitelax detection/samesitescript detection/samlinj detection/secheaders detection/secondorder detection/sessionfixation detection/sessionlifecycle detection/smuggling detection/sse detection/ssi detection/ssrf detection/ssti detection/stacktrace detection/storage detection/storageinj detection/subtakeover detection/tabnabbing detection/techstack detection/tls detection/tokenentropy detection/typejuggling detection/verbtamper detection/wafdetect detection/webhooksig detection/ws detection/xfs detection/xpath detection/xsleaks detection/xslt detection/xss detection/xxe discovery discovery/jsmining discovery/openapi discovery/spa headless http owasp/api owasp/top10 owasp/wstg payloads payloads/arginject payloads/auth payloads/cachepoisoning payloads/cloud payloads/cmdi payloads/crlf payloads/cssinj payloads/csti payloads/deser payloads/domclobber payloads/emailinj payloads/esi payloads/exposure payloads/fileops payloads/headerinj payloads/hpp payloads/htmlinj payloads/http3desync payloads/javareflect payloads/jndi payloads/ldap payloads/lfi payloads/loginj payloads/massassign payloads/nodejsinject payloads/nosql payloads/paraminject payloads/phpinject payloads/protopollution payloads/redirect payloads/rfi payloads/rscinject payloads/secheaders payloads/smuggling payloads/solrinject payloads/sqli payloads/ssi payloads/ssrf payloads/ssti payloads/storageinj payloads/subtakeover payloads/sync/htparser payloads/sync/patparser payloads/vhost payloads/webauthn payloads/xpath payloads/xss payloads/xxe reporting scanner templates templates/executor templates/matchers templates/parser tools tools/nuclei tools/sqlmap Click to show internal directories. Click to hide internal directories.