Alternatives and similar repositories for HRS

Users that are interested in HRS are comparing it to the libraries listed below

• hahwul / ws-smuggler

  View on GitHub
  WebSocket Connection Smuggler
  ☆47Sep 30, 2022Updated 3 years ago
• hahwul / websocket-connection-smuggler

  View on GitHub
  websocket-connection-smuggler
  ☆66Jan 22, 2020Updated 6 years ago
• neex / http2smugl

  View on GitHub
  ☆561Mar 27, 2025Updated 10 months ago
• bahruzjabiyev / frameshifter

  View on GitHub
  Grammar-based HTTP/2 fuzzer with mutation ability
  ☆47Aug 18, 2022Updated 3 years ago
• BishopFox / h2csmuggler

  View on GitHub
  HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
  ☆778May 10, 2022Updated 3 years ago
• minight / h2csmuggler

  View on GitHub
  ☆28Sep 25, 2020Updated 5 years ago
• anshumanpattnaik / http-request-smuggling

  View on GitHub
  HTTP Request Smuggling Detection Tool
  ☆535Dec 21, 2023Updated 2 years ago
• fransallen / dns-profile-generator

  View on GitHub
  DNS profile generator for Apple devices.
  ☆45Feb 2, 2026Updated last week
• roddux / wordpress-dos-poc

  View on GitHub
  WordPress <= 5.3.? DoS
  ☆24Dec 17, 2019Updated 6 years ago
• PortSwigger / http-request-smuggler

  View on GitHub
  ☆1,182Jan 21, 2026Updated 3 weeks ago
• VirtualBoBs / QEMUSLNetFuzz

  View on GitHub
  Stateless Network Fuzzer for QEMU (Targeting SLiRP)
  ☆17Oct 19, 2020Updated 5 years ago
• 0ang3el / websocket-smuggle

  View on GitHub
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆390Aug 15, 2024Updated last year
• Unity-Technologies / hot-fuzz

  View on GitHub
  HotFuzz is a fuzz testing utility that generates random data and sends it to a service's endpoint over HTTP or HTTPS based on a given fuz…
  ☆18Mar 14, 2021Updated 4 years ago
• filedescriptor / Unicode-Mapping-on-Domain-names

  View on GitHub
  ☆131Dec 15, 2020Updated 5 years ago
• anvilsecure / aws-sigv4

  View on GitHub
  Anvil Secure's Burp extension for signing AWS requests with SigV4
  ☆21Aug 20, 2025Updated 5 months ago
• emadshanab / 971-MB-content_discovery_wordlist

  View on GitHub
  Collection of content discovery wordlists in one wordlist.
  ☆38Jan 18, 2022Updated 4 years ago
• 0xhunster / All-About-Hacking

  View on GitHub
  A list of Mind-Map for those interested in getting started in bug bounties.
  ☆17Jul 9, 2021Updated 4 years ago
• dark-warlord14 / JSScanner

  View on GitHub
  You can read the writeup on this script here
  ☆274Jul 12, 2020Updated 5 years ago
• defparam / smuggler

  View on GitHub
  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
  ☆2,059Jan 2, 2024Updated 2 years ago
• e11i0t4lders0n / SAML-SSO

  View on GitHub
  ☆18Feb 16, 2021Updated 4 years ago
• geeknik / cve-fuzzing-poc

  View on GitHub
  PoCs discovered through fuzzing which resulted in a CVE assignment.
  ☆18Feb 14, 2020Updated 5 years ago
• miguelraulb / spamhat

  View on GitHub
  Spam Honeypot Tool
  ☆27Jun 1, 2016Updated 9 years ago
• jivoi / exploits_dev

  View on GitHub
  only for 31337
  ☆24Nov 19, 2016Updated 9 years ago
• xisigr / paper

  View on GitHub
  Web&Browser Security
  ☆43Sep 27, 2022Updated 3 years ago
• TarlogicSecurity / Arecibo

  View on GitHub
  Endpoint for Out-of-Band Exfiltration (DNS & HTTP)
  ☆94Nov 9, 2018Updated 7 years ago
• mattiasgrenfeldt / bachelors-thesis-http-request-smuggling

  View on GitHub
  ☆72Nov 8, 2021Updated 4 years ago
• capture0x / cypher

  View on GitHub
  #crypto #cipher #encode #decode #hash
  ☆52Mar 27, 2021Updated 4 years ago
• defparam / haptyc

  View on GitHub
  ☆95Sep 18, 2021Updated 4 years ago
• arbazkiraak / BurpBLH

  View on GitHub
  Broken Link Hijacking Burp Extension
  ☆57Sep 13, 2019Updated 6 years ago
• 0ang3el / Hibernate-Injection-Study

  View on GitHub
  Study about HQL injection exploitation.
  ☆51May 15, 2016Updated 9 years ago
• xxux11 / http-methods-discloser

  View on GitHub
  ☆44Apr 30, 2021Updated 4 years ago
• smaranchand / bucky

  View on GitHub
  Bucky (An automatic S3 bucket discovery tool)
  ☆198Jan 6, 2022Updated 4 years ago
• ollseg / ttt-ext

  View on GitHub
  Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
  ☆80Jun 1, 2019Updated 6 years ago
• riramar / h2rs

  View on GitHub
  Detects request smuggling via HTTP/2 downgrades.
  ☆94Jul 30, 2022Updated 3 years ago
• z3dc0ps / 0x0p1n3r

  View on GitHub
  0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily and to check subdomain takeover
  ☆57Dec 15, 2020Updated 5 years ago
• ethicalhackingplayground / crlfmap

  View on GitHub
  CRLFMap is a tool to find HTTP Splitting vulnerabilities
  ☆25Jul 31, 2020Updated 5 years ago
• BlackFan / CVE_PoCs

  View on GitHub
  CVE PoCs
  ☆21Jul 16, 2020Updated 5 years ago
• ZeddYu / HTTP-Smuggling-Lab

  View on GitHub
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆345Nov 20, 2022Updated 3 years ago
• cujanovic / subdomain-bruteforce-list

  View on GitHub
  subdomain bruteforce list
  ☆102Oct 12, 2024Updated last year