├── .gitignore ├── README.md ├── common ├── graphql-introspection-enabled.bcheck └── laravel-env-exposed.bcheck ├── passives ├── interesting-base64-encoded.bcheck ├── interesting-error-message.bcheck └── interesting-parameters.bcheck ├── sensitive ├── ds-store-exposed.bcheck ├── sensitive-dot-file-exposed.bcheck ├── sensitive-file-without-ext-exposed.bcheck ├── sensitive-log-file-exposed.bcheck └── svn-exposed.bcheck ├── testing └── appending-json.bcheck └── vulnerability-classes ├── command-injection-on-header.bcheck ├── command-injection-on-param.bcheck ├── error-based-sql-injection.bcheck ├── host-header-injection.bcheck ├── interesting-pingback-via-header.bcheck ├── interesting-pingback-via-param.bcheck ├── nginx-off-by-slash.bcheck ├── open-redirect-on-param.bcheck ├── open-redirect-on-path.bcheck ├── path-traversal-on-header.bcheck ├── path-traversal-on-param.bcheck └── path-traversal-on-path.bcheck /.gitignore: -------------------------------------------------------------------------------- 1 | issues.md -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/README.md -------------------------------------------------------------------------------- /common/graphql-introspection-enabled.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/common/graphql-introspection-enabled.bcheck -------------------------------------------------------------------------------- /common/laravel-env-exposed.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/common/laravel-env-exposed.bcheck -------------------------------------------------------------------------------- /passives/interesting-base64-encoded.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/passives/interesting-base64-encoded.bcheck -------------------------------------------------------------------------------- /passives/interesting-error-message.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/passives/interesting-error-message.bcheck -------------------------------------------------------------------------------- /passives/interesting-parameters.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/passives/interesting-parameters.bcheck -------------------------------------------------------------------------------- /sensitive/ds-store-exposed.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/sensitive/ds-store-exposed.bcheck -------------------------------------------------------------------------------- /sensitive/sensitive-dot-file-exposed.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/sensitive/sensitive-dot-file-exposed.bcheck -------------------------------------------------------------------------------- /sensitive/sensitive-file-without-ext-exposed.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/sensitive/sensitive-file-without-ext-exposed.bcheck -------------------------------------------------------------------------------- /sensitive/sensitive-log-file-exposed.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/sensitive/sensitive-log-file-exposed.bcheck -------------------------------------------------------------------------------- /sensitive/svn-exposed.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/sensitive/svn-exposed.bcheck -------------------------------------------------------------------------------- /testing/appending-json.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/testing/appending-json.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/command-injection-on-header.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/command-injection-on-header.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/command-injection-on-param.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/command-injection-on-param.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/error-based-sql-injection.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/error-based-sql-injection.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/host-header-injection.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/host-header-injection.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/interesting-pingback-via-header.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/interesting-pingback-via-header.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/interesting-pingback-via-param.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/interesting-pingback-via-param.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/nginx-off-by-slash.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/nginx-off-by-slash.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/open-redirect-on-param.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/open-redirect-on-param.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/open-redirect-on-path.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/open-redirect-on-path.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/path-traversal-on-header.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/path-traversal-on-header.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/path-traversal-on-param.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/path-traversal-on-param.bcheck -------------------------------------------------------------------------------- /vulnerability-classes/path-traversal-on-path.bcheck: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/j3ssie/custom-bcheck-scan/HEAD/vulnerability-classes/path-traversal-on-path.bcheck --------------------------------------------------------------------------------