Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, focused on null byte injection, double encoding, and input validation evasion scenarios.
☆14Sep 20, 2021Updated 5 years ago
Alternatives and similar repositories for URL-Encode-Injection
Users that are interested in URL-Encode-Injection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆13Nov 1, 2023Updated 2 years ago
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- This is a compiled cheatsheet from my experience of OSCP 2023 journey. Won't say it is all-rounded but a good starting point if you wanna…☆15Oct 17, 2024Updated 2 years ago
- A collection of Burp Suite Lambda Filters ~ Bambdas☆32Oct 1, 2024Updated 2 years ago
- For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)☆54Feb 26, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A Simple Tool to Pull Paid Bounty Scopes for Wide Recon Actvities☆108Feb 22, 2021Updated 5 years ago
- stdin writes to slack☆13Feb 8, 2020Updated 6 years ago
- ☆14Aug 4, 2021Updated 5 years ago
- A BurpSuite extension for vulnerability Scanning☆31Feb 16, 2024Updated 2 years ago
- A powerful Burp extension to make bounty rain☆13Feb 1, 2022Updated 4 years ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆14Jan 17, 2023Updated 3 years ago
- Yet Another 403 Bypass Tool☆12Feb 19, 2023Updated 3 years ago
- 网站监控☆11Nov 9, 2019Updated 6 years ago
- Hello, Attack Surface Scan, BurpSuite完全被动扫描插件，不主动发送任何请求，适合挂机使用。☆24Jul 10, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Expired domain names by day 2014 (EDNBD) https://cirosantilli.com/cia-2010-covert-communication-websites#expired-domain-trackers☆16Mar 8, 2025Updated last year
- huntr.dev public disclosures/hacktivity watcher☆17Nov 5, 2023Updated 2 years ago
- ☆38Dec 10, 2023Updated 2 years ago
- ☆17Jul 21, 2025Updated last year
- text4shell(CVE-2022-42889) BurpSuite Scanner☆20Dec 9, 2022Updated 3 years ago
- Digging into private data through Sonarcloud public projects☆11Sep 13, 2024Updated 2 years ago
- vhost scanning☆37Nov 1, 2023Updated 2 years ago
- header-fuzz allows you to fuzz any HTTP header with a wordlist and evaluate success or failure based on the returning HTTP status code.☆17Apr 15, 2020Updated 6 years ago
- A lightweight version of my bug bounty hunting framework designed to be run on Synack's LP+ machines.☆11Jul 11, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- URL scanner for recon, vulnerabilities, secrets and more!☆12Sep 27, 2021Updated 5 years ago
- Server prepared for SSRF post exploitation, javascript exploits and open redirect.☆13Jan 4, 2023Updated 3 years ago
- A tool to download program information from Bugcrowd, for use by researchers to compare programs they are eligible to participate in☆20Dec 22, 2022Updated 3 years ago
- A Burp Suite extension for finding DNS vulnerabilities in web applications!☆91Sep 12, 2023Updated 3 years ago
- Regex out URI parameters from backend code, craft URIs to check for reflections or send to local burp proxy☆13Dec 8, 2022Updated 3 years ago
- Web application recon for bug bounty☆21Apr 19, 2020Updated 6 years ago
- Reverse whois query tool☆11Jul 28, 2016Updated 10 years ago
- A collection of one off hacks and simple scripts☆27Mar 21, 2023Updated 3 years ago
- Find subdomains on GitLab.☆106Apr 28, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- CVE-2023-28121 - WooCommerce Payments < 5.6.2 - Unauthenticated Privilege Escalation [ Mass Add Admin User ]☆11Jul 14, 2023Updated 3 years ago
- A comprehensive VS Code extension for developing Burp Suite extensions☆14Jul 22, 2025Updated last year
- Quicky serve files over http or https using flask.☆35Jan 26, 2025Updated last year
- An HTTP request smuggling scanner designed to work at scale☆26Oct 2, 2022Updated 4 years ago
- Continuous Reconnaissance and Vulnerability Scanning for Bug Bounties☆21Jun 6, 2024Updated 2 years ago
- ☆19May 18, 2025Updated last year
- Modern real world bug bounty payloads and exploitation techniques with may earn you some $$$.☆30Nov 7, 2023Updated 2 years ago