Directories ¶ Show internal Expand all Path Synopsis angular_template_injection api_key_url_exposure api_rate_limit_bypass api_spec_ingest aspnet_blazor_exposure aspnet_health_exposure aspnet_identity_probe aspnet_misconfig aspnet_sensitive_files aspnet_service_exposure aspnet_viewstate_scan authz_compare backslash_transformation backup_file_discovery bfla_detection cache_deception cdn_object_traversal_listing client_prototype_pollution cloud_bucket_takeover cloud_origin_bypass cloud_public_read cloud_storage_listing cms_installer_exposure code_exec command_injection_echo command_injection_oast command_injection_timing common_directory_listing cors_misconfiguration cpdos crlf_injection csrf_verify csti_detection dashboard_exposure default_credentials django_admin_exposure django_browsable_api_exposure django_debug_exposure django_debug_toolbar_exposure drupal_misconfig drupal_user_enum express_debug_probe express_directory_listing express_trust_proxy_misconfig fastapi_auth_inconsistency fastapi_docs_exposure fastify_hono_probe file_upload_scan firebase_auth_misconfig firebase_functions_exposure firebase_misconfig firebase_rtdb_exposure firebase_storage_exposure flask_werkzeug_debugger forbidden_bypass go_debug_endpoint_exposure graphql_scan host_header_injection http_method_tampering http_request_smuggling idor_detection idor_guid iis_shortname_discovery input_behavior_probe insecure_deserialization internal_header_probe java_appserver_console java_sensitive_files joomla_misconfig joomla_user_enum js_devserver_exposure jsonp_callback jwt_vulnerability laravel_admin_exposure laravel_devtool_exposure laravel_ignition_rce laravel_misconfig laravel_sensitive_files ldap_injection lfi_generic lfi_path_traversal log4shell_probe magento_misconfig mass_assignment mcp_batch_abuse mcp_completion_enum mcp_method_enum mcp_origin_rebinding mcp_prompt_fuzz mcp_resource_fuzz mcp_server_probe mcp_session_checks mcp_tool_fuzz metaframework_probe nextjs_chunk_audit nextjs_data_leakage nextjs_draft_mode_exposure nextjs_image_ssrf nextjs_middleware_bypass nextjs_version_audit nginx_off_by_slash nginx_path_escape nosqli_error_based nosqli_operator_injection oast_probe oauth_misconfiguration open_redirect open_redirect_confusion path_normalization pdf_generation_injection php_composer_exposure php_debug_exposure php_framework_debug php_path_info_misconfig php_source_disclosure prototype_pollution proxy_header_trust proxy_pingback race_interference rails_action_mailbox_probe rails_active_storage_probe rails_admin_dashboard rails_info_exposure rails_sensitive_files reflected_ssti response_header_injection reverse_proxy_path_confusion routing_ssrf sensitive_file_discovery smart_behavior_detection spring_actuator_misconfig spring_boot_admin_exposure spring_cloud_config_exposure spring_data_rest_exposure spring_debug_exposure spring_gateway_exposure spring_h2_console_exposure spring_jolokia_exposure sqli_boolean_blind sqli_error_based sqli_time_blind ssrf_blind ssrf_detection ssrf_filter_bypass ssrf_protocol_smuggling ssti_blind ssti_detection struts_ognl_injection subdomain_takeover suspect_transform swagger_exposure symfony_misconfig tls_cert_recon tomcat_manager_exposure upgrade_routing_ssrf web_cache_poisoning websocket_security wp_ajax_exposure wp_misconfig wp_user_enum wp_xmlrpc ws_cswsh ws_injection xml_saml_security xss_dom_confirm xss_light_scanner xss_stored xxe_generic Click to show internal directories. Click to hide internal directories.