A Burp extension to Fuzz URLs for HTTP parser inconsistencies
☆16Jan 9, 2024Updated 2 years ago
Alternatives and similar repositories for url-fuzzer-401-403-bypass
Users that are interested in url-fuzzer-401-403-bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆31Oct 21, 2025Updated 11 months ago
- A python3 script searching for secret on swaggerhub☆66Mar 22, 2022Updated 4 years ago
- ☆14Nov 8, 2024Updated last year
- Automates Kali Linux pentesting with MCP: programmatic access to popular tools, SSH and reverse shell management, file operations, and Do…☆39Dec 15, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 3 years ago
- Saves pages to Wayback machine☆13Dec 2, 2024Updated last year
- Automated GitHub secret scanning with smart alerting & monitoring.☆31Jan 15, 2026Updated 9 months ago
- Rubidea - Bind XSS Server to Steal cookies.☆14May 2, 2020Updated 6 years ago
- Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.☆53Jan 26, 2026Updated 8 months ago
- ☆20Sep 6, 2023Updated 3 years ago
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Oct 11, 2026Updated last week
- 基于单FOFA资产搜索引擎账号部署的多人协作查询B/S模式，后端部署后通过前端网页交互查询数据和导出数据☆13Aug 1, 2025Updated last year
- Wordpress Plugins List☆29Jun 17, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- sub domain wild card filtering tool☆39Apr 18, 2020Updated 6 years ago
- A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.☆56Apr 25, 2022Updated 4 years ago
- ☆29Sep 25, 2020Updated 6 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- O Projeto FR1DA Web é uma aplicação interativa para administrar dispositivos Android via ADB e executar scripts Frida. Oferece funcionali…☆13Sep 16, 2026Updated last month
- A rewrite of the popular altDNS subdomain tool by @infosec-au☆12Feb 28, 2019Updated 7 years ago
- chrome插件☆13Mar 19, 2025Updated last year
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decry…☆53Sep 7, 2026Updated last month
- Stop getting 403 Forbidden. A specialized httpx-like toolkit for WAF evasion.☆24Updated this week
- Archive of pentestmonkey.net cheat sheets in case the site goes away permanently☆13Oct 28, 2019Updated 6 years ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆72Feb 8, 2023Updated 3 years ago
- ☆46Mar 7, 2025Updated last year
- Finds Documents On Cloud Assets Using grayhatwarfare API for short urls☆24Mar 2, 2022Updated 4 years ago
- Basic implementation of certstream to print new subdomains and domains☆37Jul 6, 2021Updated 5 years ago
- A JavaFX version of the current checkbox in iOS☆11May 24, 2018Updated 8 years ago
- Check url is live (*HTTP status code "200 ok" only*).☆15Jun 13, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Use claude-code for free with NVIDIA-NIM via the terminal CLI or telegram; pm2 start "uv run uvicorn server:app --host 0.0.0.0 --port 808…☆19Feb 21, 2026Updated 7 months ago
- A collection of one off hacks and simple scripts☆27Mar 21, 2023Updated 3 years ago
- Tool to fuzz for interesting vhost.☆23Jan 8, 2025Updated last year
- ☆79Jul 10, 2026Updated 3 months ago
- Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…☆32Dec 7, 2023Updated 2 years ago
- TLDs finder — check domain name availability across all valid top-level domains.☆109Oct 20, 2024Updated last year
- Simple burp extension for routing traffic over tor. It instruments tor to switch to a new circuit after every N requests.☆18Jun 20, 2022Updated 4 years ago