A curated list of awesome blogs and tools about HTTP request smuggling attacks. Feel free to contribute! 🍻
☆128Sep 6, 2022Updated 4 years ago
Alternatives and similar repositories for Awesome-HTTPRequestSmuggling
Users that are interested in Awesome-HTTPRequestSmuggling are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆28Jun 7, 2022Updated 4 years ago
- ☆17May 10, 2021Updated 5 years ago
- ☆563Mar 27, 2025Updated last year
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆348Nov 20, 2022Updated 3 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Jul 30, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆32May 9, 2021Updated 5 years ago
- ☆12Oct 2, 2022Updated 4 years ago
- HTTP Request Smuggling Detection Tool☆549Dec 21, 2023Updated 2 years ago
- BlizzardWrap - A CLI tool for encoding and decoding (supports several formats/algos)☆16Jun 19, 2021Updated 5 years ago
- a benchmarking&stressing tool that can send raw HTTP requests☆164Sep 24, 2022Updated 4 years ago
- ☆36Aug 27, 2022Updated 4 years ago
- ☆93Sep 18, 2021Updated 5 years ago
- ☆71Nov 8, 2021Updated 4 years ago
- Capture all RabbitMQ messages being sent through a broker.☆34Feb 13, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Source Code Management Attack Toolkit☆13Aug 1, 2022Updated 4 years ago
- 2022 CTF public release☆23Jun 15, 2022Updated 4 years ago
- Blog about HTTP Request Smuggling, including a demo application.☆32Jan 4, 2022Updated 4 years ago
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10May 1, 2021Updated 5 years ago
- Simple tool to perform HTML Smuggling.☆65Aug 17, 2021Updated 5 years ago
- Untangle is a multi-layer web server fingerprinting tool☆14May 14, 2024Updated 2 years ago
- your bestfried for finding URLs of a target☆10Apr 5, 2023Updated 3 years ago
- Stanford's Machine Learning Exercises☆12Apr 7, 2020Updated 6 years ago
- a simple blackjack game supported by card counting and basic strategy☆11Aug 9, 2015Updated 11 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Blind SQL Injection (BSQLI) Data Exploration Tool☆18Feb 18, 2017Updated 9 years ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3☆2,122Jan 2, 2024Updated 2 years ago
- Random utilities from my security projects that might be useful to others☆183Jan 26, 2025Updated last year
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆821May 10, 2022Updated 4 years ago
- Grammar-based HTTP/1 fuzzer with mutation ability☆265Oct 30, 2024Updated 2 years ago
- A recon Framework for Bug Bounty Hunters that would convert the output of a script into Markdown syntax document, which would help them t…☆12Sep 21, 2021Updated 5 years ago
- Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.☆133Jul 11, 2021Updated 5 years ago
- a low(zero) cost threat intelligence&response tool against phishing domains☆154Dec 8, 2022Updated 3 years ago
- Scraping creds using Github API and truffleHog☆11Dec 13, 2023Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- JSON CSRF PoC☆14Aug 1, 2020Updated 6 years ago
- CloudFlare Checker written in Go☆238May 12, 2024Updated 2 years ago
- Additional nuclei templates☆38Oct 16, 2023Updated 3 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆181Oct 26, 2024Updated 2 years ago
- Python-based CLI Password Analyser (Reporting Tool)☆32Aug 13, 2021Updated 5 years ago
- Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]☆29Jan 6, 2021Updated 5 years ago
- Just a simple SMTP server, implementation of @corpix smtpd library☆15May 8, 2020Updated 6 years ago