Blazing fast, advanced Padding Oracle exploit
☆282Dec 12, 2025Updated 10 months ago
Alternatives and similar repositories for padre
Users that are interested in padre are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.☆221Feb 3, 2023Updated 3 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- Chromium based web crawler that identifies in-scope urls☆13Jun 4, 2023Updated 3 years ago
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆679Aug 28, 2025Updated last year
- An IIS short filename enumeration tool☆1,236Nov 25, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Black box fuzzer for web applications☆440Jul 20, 2025Updated last year
- A couple of different scripts, made to automate attacks against NoSQL databases.☆66Mar 13, 2024Updated 2 years ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,385Aug 7, 2025Updated last year
- CLI tool for PKCS7 padding oracle attacks☆146Feb 25, 2021Updated 5 years ago
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…☆445Dec 30, 2025Updated 10 months ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆519Jun 22, 2022Updated 4 years ago
- A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers☆374Dec 14, 2023Updated 2 years ago
- Analyze your tryhackme progress!☆12May 27, 2024Updated 2 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,108Aug 5, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆28Aug 18, 2023Updated 3 years ago
- Multi-threaded Padding Oracle attacks against any service. Written in Rust.☆101Mar 5, 2023Updated 3 years ago
- Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Buil…☆248Feb 4, 2026Updated 9 months ago
- Automated HTTP Request Repeating With Burp Suite☆37Apr 3, 2023Updated 3 years ago
- 🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.☆1,018Jan 10, 2025Updated last year
- ☆634Oct 28, 2026Updated last week
- Generate a dynamic PAC script that will route traffic to your Burp proxy only if it matches the scope defined in your Burp target.☆34Nov 8, 2021Updated 4 years ago
- A library for detecting known secrets across many web frameworks☆837Updated this week
- ☆2,381Nov 24, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- HTTP Request Smuggling over HTTP/2 Cleartext (h2c)☆822May 10, 2022Updated 4 years ago
- Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.☆243Jul 24, 2025Updated last year
- The home to the popular script named Voidware☆18Feb 10, 2025Updated last year
- A simple tool for bypassing file upload restrictions.☆908Jul 22, 2024Updated 2 years ago
- A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows☆308Sep 8, 2023Updated 3 years ago
- A tool to download program information from Bugcrowd, for use by researchers to compare programs they are eligible to participate in☆19Dec 22, 2022Updated 3 years ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆881Oct 30, 2026Updated last week
- Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)☆1,590Dec 21, 2025Updated 10 months ago
- Abuse trust-boundaries to bypass firewalls and network controls☆433Jul 10, 2026Updated 3 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,755Oct 22, 2026Updated 2 weeks ago
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆13Dec 29, 2020Updated 5 years ago
- Spartacus DLL/COM Hijacking Toolkit☆1,085Feb 1, 2024Updated 2 years ago
- A reverse shell in PHP using Unicode encoding as variable assignment☆19Mar 8, 2021Updated 5 years ago
- A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)☆1,507Sep 9, 2026Updated last month
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆279Sep 11, 2025Updated last year
- Burp Plugin to Bypass WAFs through the insertion of Junk Data☆1,523Jul 14, 2025Updated last year