🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
☆219Feb 3, 2023Updated 3 years ago
Alternatives and similar repositories for padding-oracle-attacker
Users that are interested in padding-oracle-attacker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Blazing fast, advanced Padding Oracle exploit☆281Dec 12, 2025Updated 10 months ago
- CLI tool for PKCS7 padding oracle attacks☆145Feb 25, 2021Updated 5 years ago
- RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities☆446Sep 7, 2022Updated 4 years ago
- ☆102May 5, 2020Updated 6 years ago
- Gogs CVEs☆79Nov 30, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.☆48Jul 20, 2022Updated 4 years ago
- Padding oracle attack against PKCS7☆330Oct 5, 2022Updated 4 years ago
- OpenVPN Connect for Windows (MSI) - 3.1.0.361 - Privilege Escalation☆25Feb 28, 2020Updated 6 years ago
- CVE-2020-12828 PoC and Analysis.☆28Jun 30, 2020Updated 6 years ago
- Tool to test for existence of CVE-2020-8218☆21Sep 5, 2020Updated 6 years ago
- Multi-threaded Padding Oracle attacks against any service. Written in Rust.☆101Mar 5, 2023Updated 3 years ago
- List DTDs and generate XXE payloads using those local DTDs.☆666Feb 21, 2024Updated 2 years ago
- ZIP File Raider - Burp Extension for ZIP File Payload Testing☆71Aug 31, 2020Updated 6 years ago
- Burp Suite extension to help make Graphql request more readable☆29Dec 7, 2017Updated 8 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Situational Awareness script to identify how and where to run implants☆71Dec 6, 2024Updated last year
- Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys☆675Feb 1, 2025Updated last year
- Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal☆103May 25, 2020Updated 6 years ago
- MySQL Injection Exfoliation Optimization☆24Sep 15, 2019Updated 7 years ago
- ☆34Nov 2, 2022Updated 3 years ago
- Web-based check for Windows privesc vulnerabilities☆139May 14, 2023Updated 3 years ago
- A Netcat-style backdoor for pentesting and pentest exercises☆50Nov 19, 2020Updated 5 years ago
- A python-based padding oracle tool☆21Mar 31, 2026Updated 6 months ago
- Automated script for performing Padding Oracle attacks☆814Jul 13, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- PoC for CVE-2019-19844(https://www.djangoproject.com/weblog/2019/dec/18/security-releases/)☆100Dec 24, 2019Updated 6 years ago
- a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations…☆533Mar 27, 2022Updated 4 years ago
- ☆283Nov 12, 2021Updated 4 years ago
- A CLI tool for querying passive DNS services☆45Dec 15, 2023Updated 2 years ago
- Post-Exploitation module for Penetration Tester and Hackers.☆28Dec 29, 2021Updated 4 years ago
- A portable, padding oracle exploit API☆331Dec 1, 2022Updated 3 years ago
- Citrix ADC Vulns☆88Jul 10, 2020Updated 6 years ago
- Apache Karaf XXE Vulnerability (CVE-2018-11788)☆37Jan 6, 2019Updated 7 years ago
- Use CVE-2020-0668 to perform an arbitrary privileged file move operation.☆239Feb 20, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆820May 10, 2022Updated 4 years ago
- A fast http and https prober, to check which URLs are alive☆66Aug 5, 2019Updated 7 years ago
- Words list generator to crack security tokens☆110May 20, 2020Updated 6 years ago
- Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket☆660Aug 15, 2025Updated last year
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- Generate pentest reports based on github issues.☆14Dec 8, 2022Updated 3 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago