jmdx / TLS-poison

Related projects: ⓘ

• filedescriptor / untrusted-types
  ☆647Updated 2 years ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆772Updated 2 years ago
• 0ang3el / websocket-smuggle
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆331Updated last month
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆601Updated 6 months ago
• msrkp / PPScan
  Client Side Prototype Pollution Scanner
  ☆507Updated 2 years ago
• neex / http2smugl
  ☆527Updated 9 months ago
• taviso / rbndr
  Simple DNS Rebinding Service
  ☆613Updated 4 years ago
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆581Updated 3 years ago
• incredibleindishell / SSRF_Vulnerable_Lab
  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  ☆663Updated last year
• PortSwigger / http-request-smuggler
  ☆950Updated 9 months ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆502Updated 7 months ago
• BishopFox / h2csmuggler
  HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
  ☆637Updated 2 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆250Updated last year
• ZeddYu / HTTP-Smuggling-Lab
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆343Updated last year
• nccgroup / LoggerPlusPlus
  Advanced Burp Suite Logging Extension
  ☆619Updated 3 months ago
• veracode-research / solr-injection
  Apache Solr Injection Research
  ☆569Updated 4 years ago
• teknogeek / ssrf-sheriff
  A simple SSRF-testing sheriff written in Go
  ☆310Updated 5 months ago
• weev3 / LKWA
  Lesser Known Web Attack Lab
  ☆327Updated 4 years ago
• BlackFan / content-type-research
  Content-Type Research
  ☆464Updated 7 months ago
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆351Updated 2 years ago
• PortSwigger / upload-scanner
  HTTP file upload scanner for Burp Proxy
  ☆394Updated last year
• ptoomey3 / evilarc
  Create tar/zip archives that can exploit directory traversal vulnerabilities
  ☆967Updated 3 years ago
• nccgroup / singularity
  A DNS rebinding attack framework.
  ☆1,018Updated 3 months ago
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆839Updated 2 years ago
• 0xacb / viewgen
  Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  ☆577Updated last year
• PortSwigger / xss-cheatsheet-data
  This repository contains all the XSS cheatsheet data to allow contributions from the community.
  ☆398Updated 2 months ago
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆735Updated last year
• luisfontes19 / xxexploiter
  Tool to help exploit XXE vulnerabilities
  ☆535Updated last year
• erbbysam / DNSGrep
  Quickly Search Large DNS Datasets
  ☆578Updated 3 years ago
• defparam / smuggler
  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
  ☆1,785Updated 8 months ago