doyensec / regexploit

Related projects ⓘ

Alternatives and complementary repositories for regexploit

• visma-prodsec / confused
  Tool to check for dependency confusion vulnerabilities in multiple package management systems
  ☆695Updated 2 months ago
• cve-search / git-vuln-finder
  Finding potential software vulnerabilities from git commit messages
  ☆395Updated last year
• filedescriptor / untrusted-types
  ☆654Updated 2 years ago
• semgrep / semgrep-rules
  Semgrep rules registry
  ☆804Updated this week
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆355Updated 3 years ago
• orangetw / My-Presentation-Slides
  Collections of Orange Tsai's public presentation slides.
  ☆712Updated 3 months ago
• GrrrDog / weird_proxies
  Reverse proxies cheatsheet
  ☆1,778Updated last year
• BishopFox / h2csmuggler
  HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
  ☆650Updated 2 years ago
• s0md3v / Corsy
  CORS Misconfiguration Scanner
  ☆1,372Updated 2 years ago
• PortSwigger / xss-cheatsheet-data
  This repository contains all the XSS cheatsheet data to allow contributions from the community.
  ☆403Updated this week
• iangcarroll / cookiemonster
  🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.
  ☆831Updated 3 weeks ago
• Yelp / fuzz-lightyear
  A pytest-inspired, DAST framework, capable of identifying vulnerabilities in a distributed, micro-service ecosystem through chaos enginee…
  ☆209Updated 6 months ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆803Updated 2 years ago
• doyensec / inql
  InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable…
  ☆1,537Updated 4 months ago
• BishopFox / json-interop-vuln-labs
  Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"
  ☆197Updated last year
• RedTeamPentesting / monsoon
  Fast HTTP enumerator
  ☆460Updated 3 months ago
• neex / http2smugl
  ☆528Updated 10 months ago
• xsleaks / xsleaks
  A collection of browser-based side channel attack vectors.
  ☆737Updated 7 months ago
• detectify / page-fetch
  Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pag…
  ☆513Updated 4 months ago
• msrkp / PPScan
  Client Side Prototype Pollution Scanner
  ☆511Updated 2 years ago
• 0ang3el / websocket-smuggle
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆335Updated 2 months ago
• fransr / postMessage-tracker
  A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
  ☆1,054Updated 9 months ago
• jmdx / TLS-poison
  ☆684Updated last year
• defparam / smuggler
  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
  ☆1,813Updated 10 months ago
• BlackFan / client-side-prototype-pollution
  Prototype Pollution and useful Script Gadgets
  ☆1,399Updated 9 months ago
• michelin / ChopChop
  ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.
  ☆674Updated last year
• mazen160 / secrets-patterns-db
  Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
  ☆1,041Updated 9 months ago
• Rog3rSm1th / frelatage
  Coverage-based fuzzer for python applications
  ☆233Updated 2 years ago
• Puliczek / awesome-list-of-secrets-in-environment-variables
  🦄🔒 Awesome list of secrets in environment variables 🖥️
  ☆865Updated 2 years ago