Alternatives and similar repositories for padding-oracle-attacker

Users that are interested in padding-oracle-attacker are comparing it to the libraries listed below

• mpgn / ByP-SOP
  🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️
  ☆201Updated 6 years ago
• vp777 / procrustes
  A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering
  ☆210Updated 4 years ago
• CoreyD97 / Stepper
  A natural evolution of Burp Suite's Repeater tool
  ☆199Updated last year
• lanjelot / ctfs
  notes and code on past CTFs
  ☆103Updated 3 years ago
• artssec / burp-exporter
  Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.
  ☆177Updated 3 years ago
• DistriNet / timeless-timing-attacks
  A Python implementation that facilitates finding timeless timing attack vulnerabilities.
  ☆126Updated last month
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆349Updated 2 years ago
• maxpl0it / CVE-2020-1350-DoS
  A denial-of-service proof-of-concept for CVE-2020-1350
  ☆237Updated 4 years ago
• BishopFox / rmiscout
  RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
  ☆433Updated 2 years ago
• soffensive / windowsblindread
  A list of files / paths to probe when arbitrary files can be read on a Microsoft Windows operating system
  ☆203Updated 2 years ago
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆599Updated 4 years ago
• bayotop / off-by-slash
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆259Updated 3 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆253Updated 2 years ago
• kacperszurek / exploits
  ☆264Updated 6 years ago
• c0rv4x / project-black
  Pentest/BugBounty progress control with scanning modules
  ☆281Updated 4 years ago
• mazen160 / jwt-pwn
  Security Testing Scripts for JWT
  ☆314Updated 2 years ago
• ambionics / mt_rand-reverse
  Script to recover mt_rand()'s seed with only two outputs and without any bruteforce.
  ☆153Updated 5 years ago
• Kibouo / rustpad
  Multi-threaded Padding Oracle attacks against any service. Written in Rust.
  ☆98Updated 2 years ago
• liamg / pax
  CLI tool for PKCS7 padding oracle attacks
  ☆137Updated 4 years ago
• 0ang3el / websocket-smuggle
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆363Updated 9 months ago
• filedescriptor / Unicode-Mapping-on-Domain-names
  ☆128Updated 4 years ago
• dariusztytko / token-reverser
  Words list generator to crack security tokens
  ☆110Updated 5 years ago
• FSecureLABS / dref
  DNS Rebinding Exploitation Framework
  ☆488Updated 4 years ago
• ZephrFish / Wordlists
  Various Payload wordlists
  ☆236Updated last month
• lc / theftfuzzer
  TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
  ☆315Updated 2 years ago
• neex / gifoeb
  exploit for ImageMagick's uninitialized memory disclosure in gif coder
  ☆281Updated 7 years ago
• rsrdesarrollo / generator-burp-extension
  Everything you need about Burp Extension Generation
  ☆154Updated 2 years ago
• nightowl131 / AAPG
  [A]ndroid [A]pplication [P]entest [G]uide
  ☆124Updated 5 years ago
• PortSwigger / command-injection-attacker
  SHELLING - a comprehensive OS command injection payload generator
  ☆110Updated 5 years ago
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆259Updated 2 years ago