BishopFox / h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
☆689Updated 2 years ago
Alternatives and similar repositories for h2csmuggler:
Users that are interested in h2csmuggler are comparing it to the libraries listed below
- ☆528Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆836Updated 3 years ago
- Client Side Prototype Pollution Scanner☆510Updated 2 years ago
- Fetches javascript file from a list of URLS or subdomains.☆753Updated last year
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)☆572Updated last year
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆501Updated 2 years ago
- ☆670Updated 2 years ago
- NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.☆372Updated 3 years ago
- Content-Type Research☆591Updated 11 months ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆619Updated 2 months ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆349Updated 5 months ago
- List DTDs and generate XXE payloads using those local DTDs.☆619Updated 11 months ago
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆935Updated 3 weeks ago
- Scrape domain names from SSL certificates of arbitrary hosts☆629Updated 10 months ago
- Accept URLs on stdin, replace all query string values with a user-supplied value☆786Updated 2 years ago
- Go client to communicate with Chaos DB API.☆671Updated this week
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆957Updated 7 months ago
- Making Favicon.ico based Recon Great again !☆1,146Updated last year
- Web App bug hunting☆556Updated 7 months ago
- HTTP Request Smuggling Detection Tool☆482Updated last year
- A fuzzer for detecting open redirect vulnerabilities☆725Updated 6 months ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆853Updated last year
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,252Updated 4 months ago
- Electron JS Browser To Find XSS Vulnerabilities Automatically☆686Updated 3 years ago
- a javascript change monitoring tool for bugbounties☆601Updated 5 months ago
- This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack☆689Updated last year
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆597Updated last year
- A tool to check a bunch of URLs that contain reflecting params.☆557Updated 5 months ago
- A rapid API for the Project Sonar dataset☆644Updated last year
- This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…☆322Updated 3 years ago