assetnote

Contextual Content Discovery Tool

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

Automated & Manual Wordlists provided by Assetnote

Burp Plugin to Bypass WAFs through the insertion of Junk Data

High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

Abuse trust-boundaries to bypass firewalls and network controls

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.

Repository to store exploits created by Assetnotes Security Research team

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

Adobe Experience Manager (AEM) hacking toolkit

High fidelity scanner for CVE-2026-41940 (cPanel & WHM authentication bypass)

High fidelity detection mechanism for node2shell (CVE-2026-111497)

Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)