Alternatives and similar repositories for prototype-pollution-exploits

Users that are interested in prototype-pollution-exploits are comparing it to the libraries listed below

• defparam / haptyc
  ☆95Updated 4 years ago
• BlackFan / cspp-tools
  Client-Side Prototype Pollution Tools
  ☆85Updated 4 years ago
• riramar / h2csmuggler-proxy
  This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.
  ☆37Updated 3 years ago
• w9w / bugbounty_changelogs
  ☆56Updated 9 months ago
• detectify / Varnish-H2-Request-Smuggling
  ☆56Updated 4 years ago
• GoSecure / request-smuggling-workshop
  ☆27Updated 2 years ago
• doyensec / confuser
  Dependency Confusion Security Testing Tool
  ☆51Updated 3 years ago
• riramar / h2rs
  Detects request smuggling via HTTP/2 downgrades.
  ☆94Updated 3 years ago
• wrvenkat / burp-multistep-csrf-poc
  Burp extension to generate multi-step CSRF POC.
  ☆30Updated 6 years ago
• fransr / hot-jar-swapping-urlclassloader
  Demo of the URLClassLoader JAR-swapping showing the ability to replace and exploit an already loaded JAR with inner classes
  ☆32Updated 2 years ago
• joefizz / autofindomain
  ☆24Updated 4 years ago
• kosmosec / proto-find
  Let's check if your target is vulnerable for client side prototype pollution.
  ☆66Updated last year
• mattiasgrenfeldt / bachelors-thesis-http-request-smuggling
  ☆72Updated 4 years ago
• jzheaux / spel-injection
  An intentionally-vulnerable application for demonstrating the hazards of SpEL expression composition
  ☆28Updated 7 years ago
• melbadry9 / SSLEnum
  Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)
  ☆43Updated this week
• sw33tLie / ugly-scripts
  A collection of scripts for bug-bounty related stuff
  ☆39Updated 5 years ago
• notnotnotveg / nuclei-custom-templates
  Additional nuclei templates
  ☆37Updated 2 years ago
• neex / ghostinthepdf
  ☆169Updated 4 years ago
• 303sec / log4shell-everywhere
  A Burp Suite extension which augments your proxy traffic by injecting log4shell payloads into headers
  ☆42Updated 3 years ago
• 254Labs / awesome-bambdas
  A collection of Burp Suite Lambda Filters ~ Bambdas
  ☆29Updated last year
• synopsys-sig / ATOR-Burp
  ☆84Updated last year
• wdahlenburg / CVESearch
  Query various sources for CVE proof-of-concepts
  ☆51Updated 2 years ago
• dillonfranke / protoburp
  Encode and Fuzz Custom Protobuf Messages in Burp Suite
  ☆33Updated 8 months ago
• defparam / h1stats
  a tool that compiles a csv of all h1 program stats
  ☆47Updated 2 years ago
• emadshanab / Adobe-Experience-Manager
  ☆33Updated 4 years ago
• GovTech-CSG / ProxyAgent
  ☆64Updated 3 years ago
• 0xJeti / intitools
  Collection of tools to interact with Intigriti website
  ☆16Updated last year
• 0xAwali / Virtual-Host
  Modified Nuclei Templates Version to FUZZ Host Header
  ☆50Updated 3 years ago
• kleiton0x00 / HTTP-Smuggling-Calculator
  Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.
  ☆73Updated 3 years ago
• Philesiv / XSLeaker
  Searcher for cross-site leaks (XS-Leaks)
  ☆82Updated 2 years ago