A curated list of awesome blogs and tools about HTTP request smuggling attacks. Feel free to contribute! 🍻
☆129Sep 6, 2022Updated 4 years ago
Alternatives and similar repositories for Awesome-HTTPRequestSmuggling
Users that are interested in Awesome-HTTPRequestSmuggling are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Basic XSS Scanner☆10Jan 21, 2021Updated 5 years ago
- ☆17May 10, 2021Updated 5 years ago
- ☆28Jun 7, 2022Updated 4 years ago
- ☆32May 9, 2021Updated 5 years ago
- ☆564Mar 27, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- Blog about HTTP Request Smuggling, including a demo application.☆31Jan 4, 2022Updated 4 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Jul 30, 2022Updated 4 years ago
- Removes duplicate entries from a file, resulting in only unique parameter combinations. Useful for parsing waybackurls and making recon m…☆11May 31, 2020Updated 6 years ago
- a benchmarking&stressing tool that can send raw HTTP requests☆165Sep 24, 2022Updated 4 years ago
- ☆12Oct 2, 2022Updated 4 years ago
- BlizzardWrap - A CLI tool for encoding and decoding (supports several formats/algos)☆16Jun 19, 2021Updated 5 years ago
- HTTP Request Smuggling Detection Tool☆547Dec 21, 2023Updated 2 years ago
- ☆36Aug 27, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Capture all RabbitMQ messages being sent through a broker.☆32Feb 13, 2021Updated 5 years ago
- Source Code Management Attack Toolkit☆13Aug 1, 2022Updated 4 years ago
- ☆93Sep 18, 2021Updated 5 years ago
- ☆71Nov 8, 2021Updated 4 years ago
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆820May 10, 2022Updated 4 years ago
- Python-based CLI Password Analyser (Reporting Tool)☆32Aug 13, 2021Updated 5 years ago
- ☆29Jan 10, 2023Updated 3 years ago
- 👻👁🔍📡 If an attacker has created a fake enterprise wireless network, my goal is to deceive him.☆18Feb 10, 2019Updated 7 years ago
- a low(zero) cost threat intelligence&response tool against phishing domains☆154Dec 8, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆404Aug 15, 2024Updated 2 years ago
- 2022 CTF public release☆23Jun 15, 2022Updated 4 years ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆2,113Jan 2, 2024Updated 2 years ago
- Subdomain takeover scanner using Python asyncio☆17Oct 24, 2022Updated 3 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆181Oct 26, 2024Updated last year
- all manner of wordlists☆23Jan 19, 2022Updated 4 years ago
- Blind SQL Injection (BSQLI) Data Exploration Tool☆18Feb 18, 2017Updated 9 years ago
- Simple tool to perform HTML Smuggling.☆65Aug 17, 2021Updated 5 years ago
- Random utilities from my security projects that might be useful to others☆183Jan 26, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A traffic analyzer to evade Empire's communication from Anomaly-Based IDS☆107Aug 13, 2018Updated 8 years ago
- All The Notes And Tips I FOund In Github And Twitter I Put Them Here☆34Aug 31, 2020Updated 6 years ago
- Stanford's Machine Learning Exercises☆12Apr 7, 2020Updated 6 years ago
- Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.☆133Jul 11, 2021Updated 5 years ago
- JSON CSRF PoC☆14Aug 1, 2020Updated 6 years ago
- [NDSS 2024] ReqsMiner is an innovative fuzzing framework developed to discover previously unexamined inconsistencies in CDN forwarding re…☆25Jun 27, 2024Updated 2 years ago
- ☆96Oct 1, 2021Updated 5 years ago