Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!
☆21Aug 25, 2024Updated last year
Alternatives and similar repositories for orange-confusion-attacks
Users that are interested in orange-confusion-attacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC for leaking text nodes via CSS injection☆26Jul 27, 2024Updated last year
- Finds graphql queries in javascript files☆69May 18, 2024Updated 2 years ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆163Mar 31, 2025Updated last year
- Extract Sensitive Keys, Secret, Token Or Interested thing from source☆53Jun 4, 2020Updated 6 years ago
- My custom created nuclei for SQLi, bugbounty, pentesting☆28May 7, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Updated this week
- Recon script for wildcard domain web scopes... (for use on synack red team)☆26Mar 31, 2023Updated 3 years ago
- Custom nuclei templates for bug hunting.....☆26May 30, 2024Updated 2 years ago
- ☆92Apr 29, 2024Updated 2 years ago
- The utility aims to clean up output generated by popular tools by calculating a hash based on specific JSON values to removing junk data.☆16Apr 5, 2024Updated 2 years ago
- Aircrack implementation in wasm and webgpu☆18Nov 20, 2025Updated 8 months ago
- A high-performance command-line utility for processing and managing unique lines from input streams. Combining the functionality of sort,…☆15Jan 7, 2026Updated 6 months ago
- Url scrapper or extractor from alienvault☆39Mar 1, 2025Updated last year
- Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.☆17Aug 23, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆20Jun 26, 2024Updated 2 years ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆60Feb 22, 2025Updated last year
- Extract uncompiled, uncompressed SPA code from Webpack source maps. A fork of @rarecoil's work.☆13Jul 11, 2024Updated 2 years ago
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Jul 1, 2026Updated 3 weeks ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆41Apr 18, 2024Updated 2 years ago
- SubOwner - A Simple tool check for subdomain takeovers.☆122Oct 18, 2024Updated last year
- This tool calculates tricky canonical huffman histogram for CVE-2023-4863.☆25Dec 20, 2023Updated 2 years ago
- 403 Bypasser With auto payload generation☆12Aug 8, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Series of Tweets☆15Jan 30, 2024Updated 2 years ago
- Get 10k subdomains in securitytrails using cookie without apikey.☆41Oct 23, 2025Updated 9 months ago
- A really fast http prober.☆41Feb 1, 2024Updated 2 years ago
- Unauthorized Access to Metadata and User Data like CTF☆28Nov 30, 2024Updated last year
- EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎☆168May 15, 2026Updated 2 months ago
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆228May 22, 2023Updated 3 years ago
- ParamScan is a chrome extension for finding reflected parameters in a webpage.☆93Jan 11, 2025Updated last year
- WordTally is a Python script designed to analyze text files and provide word frequency statistics.☆16Jul 3, 2023Updated 3 years ago
- Your favourite chest/terminal bursting buddy!☆18Nov 27, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Use these VDP in Bug Hunting, These VDP are checked and verified by Bug Hunters☆21Aug 9, 2022Updated 3 years ago
- Advanced test for proxy & waf☆14Feb 10, 2026Updated 5 months ago
- A tool to migrate Burpsuite HTTP history to Caido☆42Apr 25, 2025Updated last year
- A tool to guess the rest of the shortnames provided by vulnerable IIS instances.☆44Aug 12, 2023Updated 2 years ago
- ☆178Oct 15, 2024Updated last year
- Useful configurations for the DomLogger++ extension☆48Apr 7, 2026Updated 3 months ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆48Mar 4, 2024Updated 2 years ago