ambionics / scalpel
Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.
☆58Updated 11 months ago
Alternatives and similar repositories for scalpel:
Users that are interested in scalpel are comparing it to the libraries listed below
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆88Updated 6 months ago
- Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)☆88Updated last year
- Utility for creating ZipSlip archives☆72Updated 2 years ago
- ☆17Updated last month
- Improve automated and semi-automated active scanning in Burp Pro☆61Updated 2 years ago
- Make better use of the embedded browser that comes by default with Burp☆43Updated last year
- ☆35Updated 2 years ago
- oauth-labs: an intentionally vulnerable set of OAuth 2.0 labs for security training and learning☆68Updated 5 months ago
- ☆88Updated last year
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆20Updated 3 months ago
- jws2pubkey tool☆38Updated 10 months ago
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆87Updated last year
- ☆78Updated 7 months ago
- ☆33Updated 2 weeks ago
- Burp Extension to add additional functionality for pentesting websocket based applications☆93Updated 10 months ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆30Updated 2 months ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆66Updated 2 years ago
- A collection of utilities for building extensions using Burp's Montoya API☆50Updated 10 months ago
- unleashed ffuf☆112Updated 10 months ago
- A better way of querying certificate transparency logs☆86Updated last month
- tool that generates bypasses for open redirects☆52Updated 3 years ago
- This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.☆75Updated last year
- ☆62Updated 2 years ago
- Gopher Tomcat Deployer☆48Updated 6 years ago
- An extension to use Semgrep inside Burp Suite.☆88Updated last year
- This repository contains all the examples related to a series of tutorials that demonstrate how to use the new Montoya API of Burp Suite …☆41Updated 5 months ago
- ☆165Updated 3 years ago
- This is the data that powers the PortSwigger URL validation bypass cheat sheet.☆44Updated last month
- Burp Suite's extension to scan and crawl Single Page Applications☆104Updated 2 years ago
- Nuclei Templates to reproduce Cracking the lens's Research☆125Updated 3 years ago