A Burp extension to Fuzz URLs for HTTP parser inconsistencies
☆16Jan 9, 2024Updated 2 years ago
Alternatives and similar repositories for url-fuzzer-401-403-bypass
Users that are interested in url-fuzzer-401-403-bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- burp suite插件☆14Jul 9, 2023Updated 3 years ago
- ☆19Apr 9, 2024Updated 2 years ago
- A python3 script searching for secret on swaggerhub☆66Mar 22, 2022Updated 4 years ago
- ☆14Nov 8, 2024Updated last year
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆10Sep 22, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Automates Kali Linux pentesting with MCP: programmatic access to popular tools, SSH and reverse shell management, file operations, and Do…☆38Dec 15, 2025Updated 9 months ago
- Saves pages to Wayback machine☆13Dec 2, 2024Updated last year
- Introduction to CYS4-SensitiveDiscoverer, a Burp extension that discovers sensitive information inside HTTP messages.☆28Nov 26, 2024Updated last year
- Automated GitHub secret scanning with smart alerting & monitoring.☆31Jan 15, 2026Updated 8 months ago
- Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.☆54Jan 26, 2026Updated 8 months ago
- MCP Attack Surface Detector - Burp plugin to make manual testing of MCP servers easier in Burp Suite☆33Feb 26, 2026Updated 7 months ago
- 基于单FOFA资产搜索引擎账号部署的多人协作查询B/S模式，后端部署后通过前端网页交互查询数据和导出数据☆13Aug 1, 2025Updated last year
- ☆20Sep 6, 2023Updated 3 years ago
- Wordpress Plugins List☆29Jun 17, 2019Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- sub domain wild card filtering tool☆40Apr 18, 2020Updated 6 years ago
- A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.☆57Apr 25, 2022Updated 4 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- ☆29Sep 25, 2020Updated 6 years ago
- A rewrite of the popular altDNS subdomain tool by @infosec-au☆12Feb 28, 2019Updated 7 years ago
- chrome插件☆13Mar 19, 2025Updated last year
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 6 months ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- A Burp Suite extension for creating and editing JSON Web Tokens. This tool supports signing and verification of JWS, encryption and decry…☆52Sep 7, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- LFI to RCE via phpinfo() assistance or via controlled log file☆72Feb 8, 2023Updated 3 years ago
- Archive of pentestmonkey.net cheat sheets in case the site goes away permanently☆13Oct 28, 2019Updated 6 years ago
- Finds Documents On Cloud Assets Using grayhatwarfare API for short urls☆24Mar 2, 2022Updated 4 years ago
- ☆48Mar 7, 2025Updated last year
- Basic implementation of certstream to print new subdomains and domains☆37Jul 6, 2021Updated 5 years ago
- Check url is live (*HTTP status code "200 ok" only*).☆15Jun 13, 2020Updated 6 years ago
- A JavaFX version of the current checkbox in iOS☆11May 24, 2018Updated 8 years ago
- A collection of one off hacks and simple scripts☆27Mar 21, 2023Updated 3 years ago
- Tool to fuzz for interesting vhost.☆23Jan 8, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆79Jul 10, 2026Updated 2 months ago
- A PowerShell module to test a machine against the CIS Benchmarks☆28Jul 8, 2025Updated last year
- TLDs finder — check domain name availability across all valid top-level domains.☆109Oct 20, 2024Updated last year
- Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…☆32Dec 7, 2023Updated 2 years ago
- Simple burp extension for routing traffic over tor. It instruments tor to switch to a new circuit after every N requests.☆18Jun 20, 2022Updated 4 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆94Jul 9, 2025Updated last year
- Detects request smuggling via HTTP/2 downgrades.☆94Jul 30, 2022Updated 4 years ago