header-fuzz allows you to fuzz any HTTP header with a wordlist and evaluate success or failure based on the returning HTTP status code.
☆17Apr 15, 2020Updated 6 years ago
Alternatives and similar repositories for header-fuzz
Users that are interested in header-fuzz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains.…☆21Dec 29, 2023Updated 2 years ago
- Ultra-fast pattern scanner for Bug Bounty and pentesting. Detects secrets, API endpoints, admin panels, and more across thousands of URLs…☆12Jun 4, 2025Updated last year
- Curated UTF-8 URL-encoded character dictionary for injection testing, fuzzing, and bypass techniques against web applications and APIs, f…☆14Sep 20, 2021Updated 5 years ago
- OWASP Python framework for automated STRIDE threat modeling as code — MITRE ATT&CK mapping, D3FEND mitigations, Attack Flow, CAPEC, sever…☆16Oct 3, 2026Updated 3 weeks ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆14Jan 17, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- HackTheBox rich presence for Discord☆16Sep 30, 2026Updated last month
- C2 Framework - Advanced Red Team Tool☆22Jun 1, 2026Updated 5 months ago
- Online Reverse Enginerring viewer☆15Jul 31, 2026Updated 3 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆17Jun 19, 2026Updated 4 months ago
- Recon scripts for Red Team and Web blackbox auditing☆25Mar 3, 2026Updated 7 months ago
- ☆13Updated this week
- Vibe Dumper automates the process of discovering Supabase instances in JavaScript files and testing their security posture. If a JWT toke…☆13Jan 25, 2026Updated 9 months ago
- Digging into private data through Sonarcloud public projects☆11Sep 13, 2024Updated 2 years ago
- Expired domain names by day 2014 (EDNBD) https://cirosantilli.com/cia-2010-covert-communication-websites#expired-domain-trackers☆16Mar 8, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Este proyecto implementa una reverse shell que utiliza el protocolo DNS☆15Jun 20, 2025Updated last year
- URL scanner for recon, vulnerabilities, secrets and more!☆12Sep 27, 2021Updated 5 years ago
- Server prepared for SSRF post exploitation, javascript exploits and open redirect.☆13Jan 4, 2023Updated 3 years ago
- LLM Vulnerable Application☆13Aug 19, 2023Updated 3 years ago
- Protect sensitive prompt spans with trusted LLM detection and local authenticated encryption before using Claude Code.☆14Sep 18, 2026Updated last month
- Regex out URI parameters from backend code, craft URIs to check for reflections or send to local burp proxy☆13Dec 8, 2022Updated 3 years ago
- A proof of concept of the path traversal vulnerability in the python AioHTTP library =< 3.9.1☆20Mar 19, 2024Updated 2 years ago
- Self sustainable DOM content fuzzy hashing☆11Oct 5, 2024Updated 2 years ago
- Log-Zapper is a linux and windows secure Log cleaner.☆21Jun 15, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A useful script to gather ASNs and prefixes of your target, while you are doing a wide recon process.☆12May 23, 2023Updated 3 years ago
- InYourFace is a software used to patch unencrypted and unsigned JSF ViewStates.☆10Jun 26, 2017Updated 9 years ago
- This repository shows my effort to create a pandoc based pentest report template.☆12Aug 25, 2019Updated 7 years ago
- Customizable TCP fuzzing tool to test for remote buffer overflows.☆55Apr 16, 2020Updated 6 years ago
- LDAP Injection Vulnerability Application(Blog Sample Code)☆21Jun 9, 2026Updated 4 months ago
- Máquina virtual para investigaciones en fuentes abiertas OSINT☆17Oct 4, 2024Updated 2 years ago
- bounty collection☆47Sep 1, 2024Updated 2 years ago
- simple tool for finding javascript files from webapps☆10Apr 20, 2023Updated 3 years ago
- Discovered Data and Source Code☆10May 5, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Tool made to inject malicious code inside a legitimate apk in order to gain access to the infected device.☆18Jul 21, 2024Updated 2 years ago
- A cross site scripting command and control notification server☆23Apr 13, 2026Updated 6 months ago
- Python tool for detecting subdomain takeover vulnerabilities by resolving CNAME records and checking for known error messages. It support…☆15Updated this week
- Mutation-driven HTTP fuzzing for Burp Suite☆15Mar 2, 2026Updated 8 months ago
- ☆15Feb 3, 2026Updated 8 months ago
- ☆15Nov 15, 2025Updated 11 months ago
- ☆24May 16, 2023Updated 3 years ago