lvrosa / hacking-cors
Hacking HTTP CORS from inside out: a theory to practice approach
☆10Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for hacking-cors
- A companion repo to accompany detailed guides and YouTube content to allow users to follow along☆12Updated 4 years ago
- This extension replaces the default repeater tab name with the URL path of the repeater request.☆22Updated 3 years ago
- HTML source files demonstrating HTML5 postmessage vulnerabilities☆18Updated 4 years ago
- ☆12Updated 3 years ago
- Simple tools to handle string and generate subdomain permutations☆14Updated 2 years ago
- CRLFMap is a tool to find HTTP Splitting vulnerabilities☆25Updated 4 years ago
- Interactsh deployment to AWS EC2 Instance with Terraform☆11Updated 2 years ago
- Files and Folders list used in file enumeration during Bug Bounty☆12Updated 4 years ago
- Burp Suite extension for extracting metadata from files☆19Updated 3 years ago
- Advanced Recon Tool☆26Updated 4 years ago
- HTTP requests of FrontPage expolit☆24Updated 10 years ago
- ☆21Updated 7 years ago
- Tool to find stored robots.txt files from the past☆16Updated last year
- OWASP ZAP add-on to detect reflected parameter vulnerabilities efficiently☆12Updated 3 years ago
- A Burp Extender plugin that will allow you to tamper with requests containing compressed, serialized java objects.☆24Updated 5 years ago
- Pythonize Intruder Payload☆13Updated 3 years ago
- Noob Penetration tester☆10Updated 6 months ago
- Extract parameters/paths from urls☆17Updated 4 years ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆14Updated last year
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆12Updated 3 years ago
- A BurpSuite plugin for BBRF☆24Updated this week
- A simple program to query nmap xml files in the terminal.☆26Updated 4 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.☆13Updated 3 years ago
- The lazy box is developed for setting up a good testing environment for infosec peoples easily. Mostly this box has all the necessary lib…☆12Updated 2 years ago
- Burp Extension for copying requests safely. It redacts headers like Cookie, Authorization and X-CSRF-Token for now. More support can be a…☆17Updated 4 years ago
- Deploy a Private Burpsuite Collaborator using boto3 Python Library☆57Updated 4 years ago
- Fast dns resolver☆12Updated 6 months ago
- Collection of content discovery wordlists in one wordlist.☆37Updated 2 years ago