mpgn / ByP-SOP
π΄ββ οΈ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files π΄ββ οΈ
β197Updated 6 years ago
Alternatives and similar repositories for ByP-SOP:
Users that are interested in ByP-SOP are comparing it to the libraries listed below
- researchβ151Updated 11 months ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.β258Updated 3 years ago
- β262Updated 5 years ago
- Simple "postMessage logger" Chrome extensionβ94Updated 4 years ago
- HTTP.ninjaβ149Updated last year
- Automatic tool for DNS rebinding-based SSRF attacksβ297Updated 4 years ago
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cerβ¦β285Updated last month
- DNS rebinding toolkitβ252Updated last year
- TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.β310Updated last year
- A mini webserver with FTP support for XXE payloadsβ328Updated last year
- exploit for ImageMagick's uninitialized memory disclosure in gif coderβ279Updated 7 years ago
- β128Updated 4 years ago
- Extension to log iframe and cross window communications.β54Updated last year
- An Out-of-Band XXE server for retrieving file contents over FTP.β177Updated 4 years ago
- Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.β71Updated 3 years ago
- Burp Suite Extension to monitor new scopeβ197Updated 3 years ago
- Payloads for CRLF Injectionβ223Updated 4 months ago
- notes and code on past CTFsβ103Updated 3 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.β347Updated 2 years ago
- XXE Out of Band Server.β170Updated last year
- SSRF testing toolβ245Updated 2 years ago
- Utilsβ267Updated 9 years ago
- A natural evolution of Burp Suite's Repeater toolβ195Updated last year
- β170Updated 3 years ago
- Various Payload wordlistsβ235Updated 4 years ago
- SHELLING - a comprehensive OS command injection payload generatorβ107Updated 5 years ago
- A tool to find sensitive keys and passwords in Travis logsβ141Updated 3 years ago
- jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.β150Updated 4 years ago
- Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains β¦β220Updated 2 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requestsβ350Updated 6 months ago