ZeddYu/HTTP-Smuggling-Lab external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ZeddYu/HTTP-Smuggling-Lab

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ZeddYu/HTTP-Smuggling-Lab)

Close

ZeddYu / HTTP-Smuggling-LabView on GitHubMore

• External links
• Readme badge

Use HTTP Smuggling Lab to learn HTTP Smuggling.

☆348Nov 20, 2022Updated 3 years ago

Alternatives and similar repositories for HTTP-Smuggling-Lab

Users that are interested in HTTP-Smuggling-Lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• jmdx / TLS-poison

  View on GitHub
  ☆703Nov 27, 2024Updated last year
• andresriancho / jwt-fuzzer

  View on GitHub
  JWT fuzzer
  ☆107Jul 24, 2018Updated 8 years ago
• BishopFox / GadgetProbe

  View on GitHub
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆619Mar 4, 2021Updated 5 years ago
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆580Jan 28, 2020Updated 6 years ago
• PortSwigger / http-request-smuggler

  View on GitHub
  ☆1,252Aug 13, 2026Updated 2 months ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• 0ang3el / websocket-smuggle

  View on GitHub
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆403Aug 15, 2024Updated 2 years ago
• phith0n / realworldctf

  View on GitHub
  My Real World CTF challenges
  ☆115Sep 19, 2019Updated 7 years ago
• mpgn / CVE-2019-0192

  View on GitHub
  RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
  ☆208Mar 10, 2019Updated 7 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆454Mar 24, 2022Updated 4 years ago
• l3m0n / Bypass_Disable_functions_Shell

  View on GitHub
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,190Oct 17, 2023Updated 3 years ago
• lufeirider / CVE-2019-2725

  View on GitHub
  CVE-2019-2725 命令回显
  ☆432May 8, 2023Updated 3 years ago
• waderwu / attackRmi

  View on GitHub
  attackRmi
  ☆259Oct 14, 2020Updated 6 years ago
• opensec-cn / chip

  View on GitHub
  a simple tool to detect potential security threat in php code
  ☆317Sep 9, 2024Updated 2 years ago
• Lonely-night / fastjson_gadgets_scanner

  View on GitHub
  ☆131Jun 17, 2022Updated 4 years ago
• 1-Click AI Models by DigitalOcean Gradient • Ad
  Deploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
• orangetw / awesome-jenkins-rce-2019

  View on GitHub
  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!
  ☆608May 17, 2019Updated 7 years ago
• neex / http2smugl

  View on GitHub
  ☆564Mar 27, 2025Updated last year
• iceyhexman / flask_memory_shell

  View on GitHub
  Flask 内存马
  ☆314Mar 26, 2021Updated 5 years ago
• BishopFox / h2csmuggler

  View on GitHub
  HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
  ☆821May 10, 2022Updated 4 years ago
• jas502n / kibana-RCE

  View on GitHub
  kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609
  ☆89Oct 22, 2019Updated 7 years ago
• tarunkant / Gopherus

  View on GitHub
  This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
  ☆3,428Apr 18, 2023Updated 3 years ago
• irsdl / httpninja

  View on GitHub
  HTTP.ninja
  ☆148Sep 3, 2023Updated 3 years ago
• TheTwitchy / xxer

  View on GitHub
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆518Jul 29, 2020Updated 6 years ago
• GrrrDog / Java-Deserialization-Cheat-Sheet

  View on GitHub
  The cheat sheet about Java Deserialization vulnerabilities
  ☆3,188May 26, 2023Updated 3 years ago
• Deploy open-source AI quickly and easily - Special Bonus Offer • Ad
  Runpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
• GoSecure / dtd-finder

  View on GitHub
  List DTDs and generate XXE payloads using those local DTDs.
  ☆664Feb 21, 2024Updated 2 years ago
• nccgroup / CollaboratorPlusPlus

  View on GitHub
  ☆148Feb 17, 2022Updated 4 years ago
• Mel0day / RedTeam-BCS

  View on GitHub
  BCS（北京网络安全大会）2019 红队行动会议重点内容
  ☆819Sep 4, 2019Updated 7 years ago
• Nu1LCTF / n1ctf-2019

  View on GitHub
  ☆119Mar 21, 2020Updated 6 years ago
• wagiro / BurpBounty

  View on GitHub
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…
  ☆1,818Apr 26, 2024Updated 2 years ago
• wuppp / shiro_rce_exp

  View on GitHub
  Shiro RCE (Padding Oracle Attack)
  ☆149Nov 15, 2019Updated 6 years ago
• mogwailabs / rmi-deserialization

  View on GitHub
  Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"
  ☆101Sep 20, 2019Updated 7 years ago
• welk1n / JNDI-Injection-Bypass

  View on GitHub
  Some payloads of JNDI Injection in JDK 1.8.0_191+
  ☆486Dec 9, 2020Updated 5 years ago
• modzero / mod0BurpUploadScanner

  View on GitHub
  HTTP file upload scanner for Burp Proxy
  ☆491Dec 25, 2023Updated 2 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• msrkp / PPScan

  View on GitHub
  Client Side Prototype Pollution Scanner
  ☆532Sep 17, 2022Updated 4 years ago
• cujanovic / SSRF-Testing

  View on GitHub
  SSRF (Server Side Request Forgery) testing resources
  ☆2,512Oct 12, 2024Updated 2 years ago
• momika233 / Joomla-3.4.6-RCE

  View on GitHub
  Joomla 3.4.6 – Remote Code Execution
  ☆107Jan 31, 2024Updated 2 years ago
• loerting / cafecompare

  View on GitHub
  Java code comparison tool (jar / class)
  ☆342Jun 4, 2020Updated 6 years ago
• defparam / smuggler

  View on GitHub
  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
  ☆2,120Jan 2, 2024Updated 2 years ago
• mm0r1 / exploits

  View on GitHub
  Pwn stuff.
  ☆1,821May 31, 2022Updated 4 years ago
• JackOfMostTrades / gadgetinspector

  View on GitHub
  A byte code analyzer for finding deserialization gadget chains in Java applications
  ☆1,093Jun 15, 2021Updated 5 years ago