KishanBagaria / padding-oracle-attacker
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
☆197Updated last year
Related projects: ⓘ
- A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering☆209Updated 3 years ago
- 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️☆196Updated 5 years ago
- A natural evolution of Burp Suite's Repeater tool☆194Updated 7 months ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆251Updated 2 years ago
- DNS rebinding toolkit☆250Updated last year
- Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.☆169Updated 2 years ago
- ☆128Updated 3 years ago
- A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system☆197Updated last year
- Predict Mongo ObjectIds☆125Updated 6 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆343Updated last year
- Linux privilege escalation via LXD☆129Updated 4 years ago
- notes and code on past CTFs☆99Updated 3 years ago
- ☆145Updated 2 years ago
- Simple python script to extract unsafe functions from php projects☆195Updated 6 years ago
- DupeKeyInjector☆134Updated 2 years ago
- HTTP.ninja☆147Updated last year
- A mini webserver with FTP support for XXE payloads☆326Updated 8 months ago
- A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.☆201Updated 2 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆331Updated last month
- Everything you need about Burp Extension Generation☆151Updated last year
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…☆279Updated 2 months ago
- A cheat sheet for attacking SQLite via SQLi☆92Updated 8 years ago
- SHELLING - a comprehensive OS command injection payload generator☆104Updated 5 years ago
- A Chrome extension static analysis tool to help aide in security reviews.☆145Updated last year
- ☆257Updated 5 years ago
- Piper Burp Suite Extender plugin☆113Updated 6 months ago
- This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …☆252Updated last year
- ☆84Updated 7 months ago
- ☆277Updated 2 years ago
- A toolbox for extracting RSA private keys from public keys.☆166Updated 2 years ago