Directories ¶ Show internal Expand all Path Synopsis aem_cloudsettings_injection aem_console_exposure aem_content_discovery aem_default_credentials aem_dispatcher_bypass aem_oob_injection aem_rce aem_sensitive_servlet aem_ssrf aem_xss aem_xxe angular_template_injection api_key_url_exposure api_rate_limit_bypass api_spec_ingest aspnet_blazor_exposure aspnet_health_exposure aspnet_identity_probe aspnet_misconfig aspnet_sensitive_files aspnet_service_exposure aspnet_viewstate_scan authz_compare backslash_transformation backup_file_discovery bfla_detection cache_deception cdn_object_traversal_listing client_path_traversal_confirm client_prototype_pollution cloud_bucket_takeover cloud_origin_bypass cloud_public_read cloud_storage_listing cms_installer_exposure code_exec command_injection_echo command_injection_oast command_injection_timing common_directory_listing cors_misconfiguration cpdos crlf_injection csrf_verify csti_detection dashboard_exposure default_credentials django_admin_exposure django_browsable_api_exposure django_debug_exposure django_debug_toolbar_exposure drupal_misconfig drupal_user_enum express_debug_probe express_directory_listing express_trust_proxy_misconfig fastapi_auth_inconsistency fastapi_docs_exposure fastify_hono_probe file_upload_scan firebase_auth_misconfig firebase_functions_exposure firebase_misconfig firebase_rtdb_exposure firebase_storage_exposure flask_werkzeug_debugger forbidden_bypass go_debug_endpoint_exposure graphql_scan grpc_surface_audit host_header_injection http_method_tampering http_request_smuggling idor_detection idor_guid iis_cookieless_source_disclosure iis_extension_confusion_bypass iis_shortname_discovery input_behavior_probe insecure_deserialization internal_header_probe java_appserver_console java_sensitive_files joomla_misconfig joomla_user_enum js_devserver_exposure jsonp_callback jwt_vulnerability laravel_admin_exposure laravel_devtool_exposure laravel_ignition_rce laravel_misconfig laravel_sensitive_files ldap_injection lfi_generic lfi_path_traversal llm_boundary_probe log4shell_probe magento_misconfig mass_assignment mcp_batch_abuse mcp_completion_enum mcp_dos_amplification mcp_method_enum mcp_origin_rebinding mcp_prompt_fuzz mcp_resource_fuzz mcp_server_probe mcp_session_checks mcp_tool_definition_drift mcp_tool_fuzz metaframework_probe nextjs_chunk_audit nextjs_data_leakage nextjs_draft_mode_exposure nextjs_image_ssrf nextjs_middleware_bypass nextjs_version_audit nginx_off_by_slash nginx_path_escape nosqli_error_based nosqli_operator_injection oast_probe oauth_misconfiguration open_redirect open_redirect_confusion padding_oracle path_normalization pdf_generation_injection php_composer_exposure php_debug_exposure php_framework_debug php_path_info_misconfig php_source_disclosure powerpages_dataverse_exposure prototype_pollution proxy_header_trust proxy_pingback race_interference rails_action_mailbox_probe rails_active_storage_probe rails_admin_dashboard rails_info_exposure rails_sensitive_files reflected_ssti response_header_injection reverse_proxy_path_confusion routing_ssrf salesforce_aura_apex_execution salesforce_aura_object_exposure salesforce_aura_record_exposure salesforce_lightning_debug_mode sensitive_file_discovery servicenow_kb_widget_exposure servicenow_widget_data_exposure session_fixation smart_behavior_detection spring_actuator_misconfig spring_boot_admin_exposure spring_cloud_config_exposure spring_data_rest_exposure spring_debug_exposure spring_gateway_exposure spring_h2_console_exposure spring_jolokia_exposure sqli_boolean_blind sqli_error_based sqli_out_of_band sqli_time_blind ssrf_blind ssrf_detection ssrf_filter_bypass ssrf_protocol_smuggling ssti_blind ssti_detection struts_ognl_injection subdomain_takeover suspect_transform swagger_exposure symfony_misconfig tls_cert_recon tls_protocol_cipher_audit tomcat_manager_exposure unauth_service_exposure upgrade_routing_ssrf web_cache_poisoning websocket_security wp_ajax_exposure wp_misconfig wp_user_enum wp_xmlrpc ws_cswsh ws_injection xml_saml_security xpath_injection xss_dom_confirm xss_light_scanner xss_stored xxe_generic Click to show internal directories. Click to hide internal directories.