Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!
☆21Aug 25, 2024Updated 2 years ago
Alternatives and similar repositories for orange-confusion-attacks
Users that are interested in orange-confusion-attacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC for leaking text nodes via CSS injection☆26Jul 27, 2024Updated 2 years ago
- Finds graphql queries in javascript files☆69May 18, 2024Updated 2 years ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆164Mar 31, 2025Updated last year
- Monitor your target continuously for new subdomains!☆25Mar 18, 2023Updated 3 years ago
- Extract Sensitive Keys, Secret, Token Or Interested thing from source☆53Jun 4, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- My custom created nuclei for SQLi, bugbounty, pentesting☆28May 7, 2025Updated last year
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated 2 months ago
- Recon script for wildcard domain web scopes... (for use on synack red team)☆26Mar 31, 2023Updated 3 years ago
- Custom nuclei templates for bug hunting.....☆26May 30, 2024Updated 2 years ago
- ☆91Apr 29, 2024Updated 2 years ago
- The utility aims to clean up output generated by popular tools by calculating a hash based on specific JSON values to removing junk data.☆16Apr 5, 2024Updated 2 years ago
- Aircrack implementation in wasm and webgpu☆20Nov 20, 2025Updated 10 months ago
- A high-performance command-line utility for processing and managing unique lines from input streams. Combining the functionality of sort,…☆17Jan 7, 2026Updated 8 months ago
- Url scrapper or extractor from alienvault☆39Mar 1, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.☆17Aug 23, 2024Updated 2 years ago
- ☆21Jun 26, 2024Updated 2 years ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Sep 1, 2026Updated 3 weeks ago
- Extract uncompiled, uncompressed SPA code from Webpack source maps. A fork of @rarecoil's work.☆13Jul 11, 2024Updated 2 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆41Apr 18, 2024Updated 2 years ago
- SubOwner - A Simple tool check for subdomain takeovers.☆123Oct 18, 2024Updated last year
- This tool calculates tricky canonical huffman histogram for CVE-2023-4863.☆25Dec 20, 2023Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 403 Bypasser With auto payload generation☆12Aug 8, 2024Updated 2 years ago
- A Series of Tweets☆15Jan 30, 2024Updated 2 years ago
- Get 10k subdomains in securitytrails using cookie without apikey.☆43Oct 23, 2025Updated 11 months ago
- A really fast http prober.☆40Feb 1, 2024Updated 2 years ago
- Unauthorized Access to Metadata and User Data like CTF☆28Nov 30, 2024Updated last year
- EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎☆177May 15, 2026Updated 4 months ago
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆229May 22, 2023Updated 3 years ago
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆92Jan 11, 2025Updated last year
- WordTally is a Python script designed to analyze text files and provide word frequency statistics.☆15Jul 3, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A tool to migrate Burpsuite HTTP history to Caido☆42Apr 25, 2025Updated last year
- Use these VDP in Bug Hunting, These VDP are checked and verified by Bug Hunters☆21Aug 9, 2022Updated 4 years ago
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 7 months ago
- A tool to guess the rest of the shortnames provided by vulnerable IIS instances.☆44Aug 12, 2023Updated 3 years ago
- ☆178Oct 15, 2024Updated last year
- Useful configurations for the DomLogger++ extension☆52Apr 7, 2026Updated 5 months ago