A Burp extension to Fuzz URLs for HTTP parser inconsistencies
☆15Jan 9, 2024Updated 2 years ago
Alternatives and similar repositories for url-fuzzer-401-403-bypass
Users that are interested in url-fuzzer-401-403-bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆31Oct 21, 2025Updated 9 months ago
- ☆19Apr 9, 2024Updated 2 years ago
- Automated GitHub secret scanning with smart alerting & monitoring.☆31Jan 15, 2026Updated 6 months ago
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆30Feb 26, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A python3 script searching for secret on swaggerhub☆66Mar 22, 2022Updated 4 years ago
- ☆14Nov 8, 2024Updated last year
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆10Sep 22, 2023Updated 2 years ago
- Stop getting 403 Forbidden. A specialized httpx-like toolkit for WAF evasion.☆21Jan 14, 2026Updated 6 months ago
- Saves pages to Wayback machine☆12Dec 2, 2024Updated last year
- Introduction to CYS4-SensitiveDiscoverer, a Burp extension that discovers sensitive information inside HTTP messages.☆24Nov 26, 2024Updated last year
- Tool to fuzz for interesting vhost.☆23Jan 8, 2025Updated last year
- Rubidea - Bind XSS Server to Steal cookies.☆14May 2, 2020Updated 6 years ago
- Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.☆51Jan 26, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 基于单FOFA资产搜索引擎账号部署的多人协作查询B/S模式，后端部署后通过前端网页交互查询数据和导出数据☆13Aug 1, 2025Updated 11 months ago
- ☆20Sep 6, 2023Updated 2 years ago
- Wordpress Plugins List☆28Jun 17, 2019Updated 7 years ago
- sub domain wild card filtering tool☆40Apr 18, 2020Updated 6 years ago
- A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.☆56Apr 25, 2022Updated 4 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- ☆29Sep 25, 2020Updated 5 years ago
- O Projeto FR1DA Web é uma aplicação interativa para administrar dispositivos Android via ADB e executar scripts Frida. Oferece funcionali…☆13Nov 20, 2024Updated last year
- A rewrite of the popular altDNS subdomain tool by @infosec-au☆12Feb 28, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 4 months ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decry…☆51Apr 23, 2026Updated 3 months ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆73Feb 8, 2023Updated 3 years ago
- Archive of pentestmonkey.net cheat sheets in case the site goes away permanently☆13Oct 28, 2019Updated 6 years ago
- Finds Documents On Cloud Assets Using grayhatwarfare API for short urls☆23Mar 2, 2022Updated 4 years ago
- ☆47Mar 7, 2025Updated last year
- Basic implementation of certstream to print new subdomains and domains☆37Jul 6, 2021Updated 5 years ago
- Advanced AI-powered penetration testing dashboard with WAF detection, multi-threading, and payload mutation engine☆24Nov 5, 2025Updated 8 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The Ultimate File Upload Bypass Generator☆14Nov 24, 2025Updated 8 months ago
- crawler for finding reflected parameters and reflecting special characters!☆21Dec 2, 2024Updated last year
- ☆20Apr 27, 2026Updated 3 months ago
- A JavaFX version of the current checkbox in iOS☆11May 24, 2018Updated 8 years ago
- List of payloads: reverse shell, bind shell, webshell.☆73Mar 20, 2026Updated 4 months ago
- Use claude-code for free with NVIDIA-NIM via the terminal CLI or telegram; pm2 start "uv run uvicorn server:app --host 0.0.0.0 --port 808…☆20Feb 21, 2026Updated 5 months ago
- DevSecOps for the AI-era CI/CD pipeline. Catches the bugs your AI coding assistant introduces — before they reach production.☆20Jul 14, 2026Updated 2 weeks ago