chenjj / Awesome-HTTPRequestSmuggling

Related projects ⓘ

Alternatives and complementary repositories for Awesome-HTTPRequestSmuggling

• Static-Flow / BurpSuiteAutoCompletion
  This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.
  ☆162Updated 3 years ago
• vavkamil / wp-update-confusion
  WordPress Plugin Update Confusion
  ☆67Updated 2 years ago
• riramar / h2rs
  Detects request smuggling via HTTP/2 downgrades.
  ☆92Updated 2 years ago
• xer0times / BugBounty
  Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...
  ☆145Updated 4 years ago
• allyomalley / BurpParamFlagger
  A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…
  ☆130Updated 3 years ago
• dbrwsky / Nuclei-BurpExtension
  Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.
  ☆117Updated last year
• honoki / bugbounty-openvpn-socks
  Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.
  ☆105Updated 2 years ago
• emadshanab / Nmap-NSE-scripts-collection
  ☆162Updated 2 years ago
• GoSecure / xxe-workshop
  Workshop given at Hack in Paris 2019
  ☆121Updated last year
• wdahlenburg / interactsh-collaborator
  Burpsuite plugin for Interact.sh
  ☆198Updated 4 months ago
• httpvoid / CVE-Reverse
  ☆278Updated 3 years ago
• JetP1ane / Affinis
  Recurrent Neural Network SubDomain Discovery Tool
  ☆89Updated 2 years ago
• SpiderMate / B-XSSRF
  Toolkit to detect and keep track on Blind XSS, XXE & SSRF
  ☆295Updated 5 years ago
• Impact-I / x8-Burp
  Hidden parameters discovery suite
  ☆221Updated last year
• PortSwigger / portable-data-exfiltration
  This repo contains all the injections mentioned in my talk and enumerators.
  ☆120Updated 11 months ago
• dubs3c / Injectus
  CRLF and open redirect fuzzer
  ☆109Updated 3 years ago
• hussein98d / LFI-files
  Wordlist to bruteforce for LFI
  ☆118Updated 5 years ago
• BlackFan / cspp-tools
  Client-Side Prototype Pollution Tools
  ☆84Updated 3 years ago
• imrannissar / Content-discovery
  ☆91Updated 4 years ago
• 0xmoot / s3sec
  Check AWS S3 instances for read/write/delete access
  ☆121Updated 2 years ago
• osmedeus / osmedeus-base
  Build your own reconnaissance system with Osmedeus Next Generation
  ☆180Updated last month
• ethicalhackingplayground / ssrf-tool
  ☆143Updated 2 years ago
• The-Login / DNS-Reset-Checker
  Tools to assess the DNS security of web applications
  ☆125Updated 2 years ago
• zeroc00I / ReconNotes
  Just some public notes that can be useful and i want let the world knows.
  ☆86Updated 4 years ago
• Fadavvi / Sub-Drill
  A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.
  ☆104Updated last week
• bp0lr / gauplus
  ☆285Updated 2 years ago
• phlmox / public-reports
  bug bounty disclosed reports
  ☆110Updated 3 years ago
• Sjord / jwtdemo
  Practice hacking JWT tokens
  ☆112Updated 2 years ago