JeppW / smugchunksLinks
A black-box scanner for HTTP request smuggling vulnerabilities caused by chunk parsing discrepancies.
☆17Updated last month
Alternatives and similar repositories for smugchunks
Users that are interested in smugchunks are comparing it to the libraries listed below
Sorting:
- ☆74Updated last year
- Recurrent Neural Network SubDomain Discovery Tool☆95Updated 2 years ago
- ☆72Updated 3 years ago
- Parse HPROF files from the Spring Boot Heapdump Actuator☆27Updated last year
- ☆94Updated 3 years ago
- WordPress Plugin Update Confusion☆67Updated 3 years ago
- Client-Side Prototype Pollution Tools☆85Updated 3 years ago
- goverview - Get an overview of the list of URLs☆142Updated 2 years ago
- Burp Extension that copies a request and builds a FFUF skeleton☆111Updated last year
- Authenticated SSRF in Grafana☆82Updated last year
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆164Updated 4 years ago
- Utility for creating ZipSlip archives☆74Updated 2 years ago
- Burp Bounty profiles☆83Updated 3 years ago
- ☆64Updated 3 years ago
- A simple remote scanner for Atlassian Jira☆121Updated 2 years ago
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆36Updated 2 years ago
- ☆167Updated 3 years ago
- ☆56Updated 3 years ago
- Searching for virtual hosts among non-resolvable domains☆88Updated 5 years ago
- ☆55Updated 2 years ago
- ☆44Updated 5 years ago
- Detects request smuggling via HTTP/2 downgrades.☆92Updated 3 years ago
- Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.☆113Updated 3 years ago
- Improve automated and semi-automated active scanning in Burp Pro☆61Updated 2 months ago
- Modified Nuclei Templates Version to FUZZ Host Header☆50Updated 3 years ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆56Updated 2 years ago
- Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes☆31Updated 2 years ago
- jws2pubkey tool☆40Updated last month
- Server and avi file to exploit FFmpeg HLS parse☆21Updated 6 years ago
- This repo contains all the injections mentioned in my talk and enumerators.☆130Updated last year