List of RegEx DoS (ReDoS) CVEs and resources
☆31Sep 16, 2026Updated 2 weeks ago
Alternatives and similar repositories for awesome-redos-security
Users that are interested in awesome-redos-security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool for detecting regular expression denial-of-service vulnerabilities in Android apps.☆36Jun 24, 2016Updated 10 years ago
- Command line tool to fetch, decode and brute-force CodeIgniter session cookies by guessing and bruteforcing secret keys.☆15Jan 31, 2025Updated last year
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- Playground for Race Condition attack☆24Mar 18, 2023Updated 3 years ago
- Automatically generates schema given json samples.☆10Jun 1, 2016Updated 10 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple JavaScript beautify tool☆28May 3, 2021Updated 5 years ago
- MutRex - A generator of fault detecting strings for regular expressions☆14Mar 18, 2024Updated 2 years ago
- Effective ReDoS Detection by Principled Vulnerability Modeling and Exploit Generation☆15Jul 24, 2025Updated last year
- Hackfruit is an easy search tool that finds hacking tools, commands and cheat sheets. It helps cybersecurity learing and trainings, CTFs,…☆23Dec 19, 2022Updated 3 years ago
- ☆11May 18, 2021Updated 5 years ago
- A dk.brics FSM to regular-expression-string converter☆10Jul 12, 2025Updated last year
- Tool queries the OpenAI API to enhance the description, impact, and recommendation keys of a nuclei template.☆22Apr 1, 2023Updated 3 years ago
- CVEs and Techniques used PDF as an attack vector.☆117Jul 5, 2022Updated 4 years ago
- Server prepared for SSRF post exploitation, javascript exploits and open redirect.☆13Jan 4, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A tool for check available dependency packages across npmjs, PyPI or RubyGems registry.☆30Mar 2, 2022Updated 4 years ago
- A tool for testing regular expressions for ReDoS vulnerabilities.☆60May 12, 2024Updated 2 years ago
- Deterministic Regular Expressions with Backreferences☆21Oct 12, 2020Updated 5 years ago
- ☆15Feb 15, 2023Updated 3 years ago
- A collection of client-side libraries with HTML injection vulnerabilities and DOM clobbering gadgets.☆50Aug 31, 2025Updated last year
- Writeups of some of PicoCTF 2017 challenges.☆10Aug 3, 2018Updated 8 years ago
- Vyper language fuzzing framework☆18Nov 18, 2024Updated last year
- ☆23Sep 12, 2025Updated last year
- java-audit-skillss☆16Mar 31, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Fuzzer and generator for string and regex problems in SMT-LIB 2.x format.☆22Dec 17, 2021Updated 4 years ago
- A collection of tutorials, CTFs, wargames, articles, and other resources for Smart Contract security.☆14Jun 4, 2022Updated 4 years ago
- Resources to learn Wallet Security☆64Aug 17, 2025Updated last year
- List of resources about CyberSecurity such as CTF, DFIR, Offsec, etc☆12Sep 8, 2026Updated 3 weeks ago
- A bash tool used to install famous bug bounty tools. Mainly used when setting up a fresh environment.☆16Mar 20, 2023Updated 3 years ago
- A list of weird comparison in SQL☆15May 20, 2022Updated 4 years ago
- ☆71Nov 5, 2021Updated 4 years ago
- NSE script to detect ProxyOracle☆13Aug 30, 2021Updated 5 years ago
- Proof of Concepts for unsafe deserialization in Ruby☆17Oct 17, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 🚀 一款专为 Gridea 设计的极简主题☆11Nov 8, 2020Updated 5 years ago
- A Online PHP FilterChain Generator.☆19Aug 3, 2024Updated 2 years ago
- Connect to Cisco AnyConnect VPN and open a Microsoft Remote Desktop (RDP) window☆12Apr 5, 2026Updated 5 months ago
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆17Jan 31, 2021Updated 5 years ago
- Pattern Fuzzing for Worst-Case Algorithmic Complexity using Program Synthesis☆20Aug 24, 2021Updated 5 years ago
- ☆17Jan 6, 2025Updated last year
- phpfuck: using only 5 different characters to write and execute php // (^.9)☆38Nov 26, 2021Updated 4 years ago