Alternatives and similar repositories for padding-oracle-attacker:

Users that are interested in padding-oracle-attacker are comparing it to the libraries listed below

• lanjelot / ctfs
  notes and code on past CTFs
  ☆103Updated 3 years ago
• mpgn / ByP-SOP
  🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️
  ☆199Updated 6 years ago
• liamg / pax
  CLI tool for PKCS7 padding oracle attacks
  ☆137Updated 4 years ago
• vp777 / procrustes
  A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering
  ☆210Updated 4 years ago
• luke-goddard / enumy
  Linux post exploitation privilege escalation enumeration
  ☆256Updated 4 years ago
• iagox86 / poracle
  ☆91Updated 6 years ago
• staaldraad / turner
  SOCKS5 and HTTP over TURN/STUN proxy
  ☆178Updated last year
• CoreyD97 / Stepper
  A natural evolution of Burp Suite's Repeater tool
  ☆197Updated last year
• andresriancho / mongo-objectid-predict
  Predict Mongo ObjectIds
  ☆132Updated 7 years ago
• ambionics / mt_rand-reverse
  Script to recover mt_rand()'s seed with only two outputs and without any bruteforce.
  ☆152Updated 5 years ago
• b4den / rsacrack
  A toolbox for extracting RSA private keys from public keys.
  ☆183Updated 3 years ago
• Kibouo / rustpad
  Multi-threaded Padding Oracle attacks against any service. Written in Rust.
  ☆97Updated 2 years ago
• pwntester / DupeKeyInjector
  DupeKeyInjector
  ☆135Updated 3 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆253Updated last year
• BishopFox / rmiscout
  RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
  ☆433Updated 2 years ago
• RUB-NDS / xsinator.com
  XS-Leak Browser Test Suite
  ☆80Updated last year
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆596Updated 4 years ago
• DistriNet / timeless-timing-attacks
  A Python implementation that facilitates finding timeless timing attack vulnerabilities.
  ☆123Updated this week
• xct / ropstar
  Automatic exploit generation for simple linux pwn challenges.
  ☆321Updated last year
• PortSwigger / auth-matrix
  AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.
  ☆42Updated last year
• KINGSABRI / jwtear
  Modular command-line tool to parse, create and manipulate JWT tokens for hackers
  ☆104Updated 2 years ago
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆330Updated last year
• rsrdesarrollo / generator-burp-extension
  Everything you need about Burp Extension Generation
  ☆153Updated 2 years ago
• kacperszurek / exploits
  ☆264Updated 6 years ago
• mwielgoszewski / python-paddingoracle
  A portable, padding oracle exploit API
  ☆326Updated 2 years ago
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆349Updated 2 years ago
• PortSwigger / scan-check-builder
  Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
  ☆71Updated 3 years ago
• bayotop / off-by-slash
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆259Updated 3 years ago
• filedescriptor / Unicode-Mapping-on-Domain-names
  ☆129Updated 4 years ago
• FSecureLABS / dref
  DNS Rebinding Exploitation Framework
  ☆488Updated 4 years ago