defparam / smuggler
Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
☆1,929Updated last year
Alternatives and similar repositories for smuggler:
Users that are interested in smuggler are comparing it to the libraries listed below
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,273Updated 6 months ago
- This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location☆1,246Updated 4 years ago
- MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering…☆1,402Updated this week
- The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.☆1,193Updated last month
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,715Updated 11 months ago
- Automatic SSRF fuzzer and exploitation tool☆3,133Updated last month
- declutters url lists for crawling/pentesting☆1,321Updated last month
- Fetch many paths for many hosts - without killing the hosts☆1,638Updated last year
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆2,674Updated 9 months ago
- XSS payloads designed to turn alert(1) into P1☆1,347Updated last year
- Making Favicon.ico based Recon Great again !☆1,167Updated last year
- BBT - Bug Bounty Tools (examples💡)☆1,779Updated 11 months ago
- A tool for adding new lines to files, skipping duplicates☆1,482Updated last year
- Automated & Manual Wordlists provided by Assetnote☆1,404Updated 8 months ago
- Subdomain takeover vulnerability checker☆1,171Updated 6 months ago
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆954Updated 3 months ago
- Burp plugin able to find reflected XSS on page in real-time while browsing on site☆1,149Updated 4 years ago
- A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆1,130Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domain☆3,807Updated 11 months ago
- SSRF (Server Side Request Forgery) testing resources☆2,395Updated 5 months ago
- A collection of tools to perform searches on GitHub.☆1,397Updated 2 years ago
- Rockyou for web fuzzing☆2,746Updated last month
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned ent…☆1,843Updated 4 months ago
- Automation for javascript recon in bug bounty.☆969Updated last year
- A wordlist of API names for web application assessments☆801Updated last month
- This script is intended to automate your reconnaissance process in an organized fashion☆1,958Updated 3 years ago
- A script to set up a quick Ubuntu 17.10 x64 box with tools I use.☆1,186Updated 9 months ago
- ☆1,183Updated 2 years ago
- List of XSS Vectors/Payloads☆1,222Updated 3 months ago
- Hidden parameters discovery suite☆1,805Updated 6 months ago