Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!
☆22Aug 25, 2024Updated 2 years ago
Alternatives and similar repositories for orange-confusion-attacks
Users that are interested in orange-confusion-attacks are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC for leaking text nodes via CSS injection☆26Jul 27, 2024Updated 2 years ago
- Finds graphql queries in javascript files☆69May 18, 2024Updated 2 years ago
- Monitor your target continuously for new subdomains!☆25Mar 18, 2023Updated 3 years ago
- Recon script for wildcard domain web scopes... (for use on synack red team)☆26Mar 31, 2023Updated 3 years ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆163Mar 31, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Export to GBounty is a Burp Suite extension that enables users to export selected HTTP requests from Burp Suite into a compressed ZIP fil…☆11Oct 9, 2024Updated 2 years ago
- Extract Sensitive Keys, Secret, Token Or Interested thing from source☆53Jun 4, 2020Updated 6 years ago
- My custom created nuclei for SQLi, bugbounty, pentesting☆29May 7, 2025Updated last year
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- This repo contains all the codes which i have written to automate using python in order to solve the PortSwigger Academy Labs/Challenges.☆10Jan 19, 2024Updated 2 years ago
- Custom nuclei templates for bug hunting.....☆26May 30, 2024Updated 2 years ago
- Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257☆30May 29, 2026Updated 5 months ago
- A simple Web-UI based Nuclei Parser☆13Mar 6, 2026Updated 7 months ago
- ☆91Apr 29, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Extract subdomains from CSP headers☆12Jul 10, 2025Updated last year
- Proof of concept for CVE-2025-13780☆14Dec 12, 2025Updated 10 months ago
- Aircrack implementation in wasm and webgpu☆20Oct 2, 2026Updated last month
- ☆21Jun 26, 2024Updated 2 years ago
- A high-performance command-line utility for processing and managing unique lines from input streams. Combining the functionality of sort,…☆17Jan 7, 2026Updated 9 months ago
- Tools for bug bounty☆29Jul 9, 2025Updated last year
- Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic …☆16Oct 7, 2026Updated 3 weeks ago
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆61Feb 22, 2025Updated last year
- A Series of Tweets☆15Jan 30, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Extract uncompiled, uncompressed SPA code from Webpack source maps. A fork of @rarecoil's work.☆13Jul 11, 2024Updated 2 years ago
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Nov 18, 2019Updated 6 years ago
- Paramix is a command-line tool for modifying the parameters of a list of URLs from stdin and returns them in stdout.☆17Aug 23, 2024Updated 2 years ago
- Nuclei template to detect Apache servers vulnerable to CVE-2024-38473☆30Aug 24, 2024Updated 2 years ago
- Url scrapper or extractor from alienvault☆40Mar 1, 2025Updated last year
- 403 Bypasser With auto payload generation☆12Aug 8, 2024Updated 2 years ago
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆41Apr 18, 2024Updated 2 years ago
- This tool calculates tricky canonical huffman histogram for CVE-2023-4863.☆25Dec 20, 2023Updated 2 years ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- SubOwner - A Simple tool check for subdomain takeovers.☆123Oct 18, 2024Updated 2 years ago
- A really fast http prober.☆41Feb 1, 2024Updated 2 years ago
- Enumerate Subdomains Through Google Dorks (Bypassed Page Filter)☆128Jul 1, 2025Updated last year
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆229May 22, 2023Updated 3 years ago
- Self-hosted bug bounty programs that are "scammy" or unethical☆184Sep 5, 2026Updated last month
- A tool to migrate Burpsuite HTTP history to Caido☆44Apr 25, 2025Updated last year
- Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit☆86Oct 7, 2024Updated 2 years ago