cweb / unicode-hax
A library to assist in security-testing Unicode enabled applications during fuzzing, XSS, SQLi, etc.
☆42Updated 7 years ago
Related projects: ⓘ
- An example of obtaining RCE via Redis and CSRF☆76Updated 8 years ago
- burpbuddy exposes Burp Suites's extender API over the network through various mediums, with the goal of enabling development in any langu…☆156Updated 5 years ago
- ☆75Updated this week
- An interactive OOB XXE data exfiltration tool☆90Updated 7 years ago
- This test suite contains over 40 different test cases that have proven to work with different mobile browsers in my research or testing S…☆31Updated 5 years ago
- Improved decoder for Burp Suite☆134Updated 3 years ago
- HTML5 WebSocket message fuzzer☆141Updated 5 years ago
- Highlight Burp proxy requests made by different browsers☆30Updated 6 years ago
- ☆49Updated this week
- A Burp Plugin for Detecting Weaknesses in Content Security Policies☆162Updated last year
- XXE OOB Exploitation Toolset for Automation☆63Updated 10 years ago
- ☆70Updated 6 years ago
- Image size issues plugin for Burp Suite☆92Updated 6 years ago
- Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid…☆82Updated 7 years ago
- ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.☆102Updated 5 years ago
- ☆33Updated this week
- ☆42Updated this week
- A deliberately vulnerable modern day app with lots of DOM related bugs☆35Updated 5 years ago
- TLS Redirection☆115Updated 6 years ago
- ☆115Updated this week
- Use burp's JS static code analysis on code from your local system.☆42Updated 7 years ago
- A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.☆25Updated 9 years ago
- Dirbuster plugin for Burp Suite☆70Updated 7 years ago
- Code Review Audit Script Scanner☆140Updated last year
- HTTPWookiee is an HTTP server and proxy stress tool (respect of RFC, HTTP Smuggling issues, etc). If you run an HTTP server project conta…☆49Updated 6 years ago
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆136Updated 3 years ago
- DupeKeyInjector☆134Updated 2 years ago
- Extension adds a new tab in Burp Suite called Extractor☆42Updated 5 years ago
- Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created d…☆67Updated 4 months ago
- BlindRef serves as the basis for an automated Blind-Based XXE Exploitation Framework☆26Updated 7 years ago