JeppW / smugchunksLinks
A black-box scanner for HTTP request smuggling vulnerabilities caused by chunk parsing discrepancies.
☆19Updated last week
Alternatives and similar repositories for smugchunks
Users that are interested in smugchunks are comparing it to the libraries listed below
Sorting:
- ☆95Updated 4 years ago
- tool that generates bypasses for open redirects☆52Updated 3 years ago
- Utility for creating ZipSlip archives☆79Updated 2 years ago
- goverview - Get an overview of the list of URLs☆142Updated 2 years ago
- Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.☆73Updated 3 years ago
- A Burp Suite extension which augments your proxy traffic by injecting log4shell payloads into headers☆42Updated 3 years ago
- Improve automated and semi-automated active scanning in Burp Pro☆62Updated 5 months ago
- ☆75Updated last year
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆36Updated 3 years ago
- ☆169Updated 4 years ago
- ☆27Updated 2 years ago
- ☆64Updated 3 years ago
- ☆17Updated 2 years ago
- This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.☆37Updated 3 years ago
- Recurrent Neural Network SubDomain Discovery Tool☆95Updated 3 years ago
- ☆23Updated 7 months ago
- Compiles a list of major CDN and WAF subnets.☆66Updated this week
- Additional nuclei templates☆37Updated 2 years ago
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆21Updated 9 months ago
- An intentionally-vulnerable application for demonstrating the hazards of SpEL expression composition☆28Updated 7 years ago
- Dependency Confusion Security Testing Tool☆51Updated 3 years ago
- Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.☆112Updated 3 years ago
- ☆18Updated 2 years ago
- ☆37Updated 5 years ago
- Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes☆32Updated 2 years ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆56Updated 2 years ago
- Burp extension to generate multi-step CSRF POC.☆30Updated 6 years ago
- An extension to use Semgrep inside Burp Suite.☆89Updated 5 months ago
- Searching for virtual hosts among non-resolvable domains☆88Updated 5 years ago
- A simple remote scanner for Atlassian Jira☆121Updated 2 years ago