Alternatives and similar repositories for BurpSuiteHTTPSmuggler

Users that are interested in BurpSuiteHTTPSmuggler are comparing it to the libraries listed below

• wagiro / BurpBounty

  View on GitHub
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…
  ☆1,771Apr 26, 2024Updated last year
• nccgroup / freddy

  View on GitHub
  Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans
  ☆584Sep 7, 2021Updated 4 years ago
• nccgroup / AutoRepeater

  View on GitHub
  Automated HTTP Request Repeating With Burp Suite
  ☆889Dec 15, 2021Updated 4 years ago
• cujanovic / SSRF-Testing

  View on GitHub
  SSRF (Server Side Request Forgery) testing resources
  ☆2,484Oct 12, 2024Updated last year
• modzero / mod0BurpUploadScanner

  View on GitHub
  HTTP file upload scanner for Burp Proxy
  ☆491Dec 25, 2023Updated 2 years ago
• GrrrDog / Java-Deserialization-Cheat-Sheet

  View on GitHub
  The cheat sheet about Java Deserialization vulnerabilities
  ☆3,167May 26, 2023Updated 2 years ago
• 1N3 / IntruderPayloads

  View on GitHub
  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…
  ☆3,897Sep 27, 2021Updated 4 years ago
• nccgroup / LoggerPlusPlus

  View on GitHub
  Advanced Burp Suite Logging Extension
  ☆689May 31, 2024Updated last year
• joaomatosf / jexboss

  View on GitHub
  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool
  ☆2,502Jan 21, 2020Updated 6 years ago
• snoopysecurity / awesome-burp-extensions

  View on GitHub
  A curated list of amazingly awesome Burp Extensions
  ☆3,360Feb 15, 2025Updated 11 months ago
• swisskyrepo / SSRFmap

  View on GitHub
  Automatic SSRF fuzzer and exploitation tool
  ☆3,479Sep 4, 2025Updated 5 months ago
• veracode-research / solr-injection

  View on GitHub
  Apache Solr Injection Research
  ☆579Jan 28, 2020Updated 6 years ago
• epinna / tplmap

  View on GitHub
  Server-Side Template Injection and Code Injection Detection and Exploitation Tool
  ☆4,117Apr 21, 2024Updated last year
• BishopFox / GadgetProbe

  View on GitHub
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆613Mar 4, 2021Updated 4 years ago
• bugcrowd / HUNT

  View on GitHub
  ☆2,315Dec 8, 2023Updated 2 years ago
• PortSwigger / http-request-smuggler

  View on GitHub
  ☆1,182Jan 21, 2026Updated 3 weeks ago
• BuffaloWill / oxml_xxe

  View on GitHub
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,129Dec 16, 2024Updated last year
• bayotop / off-by-slash

  View on GitHub
  Burp extension to detect alias traversal via NGINX misconfiguration at scale.
  ☆265Nov 18, 2021Updated 4 years ago
• bit4woo / domain_hunter

  View on GitHub
  A Burp Suite Extension that try to find all sub-domain, similar-domain and related-domain of an organization automatically! 基于流量自动收集整个企业或…
  ☆675Jul 16, 2023Updated 2 years ago
• c0ny1 / chunked-coding-converter

  View on GitHub
  Burp suite 分块传输辅助插件
  ☆2,021Feb 23, 2022Updated 3 years ago
• petercunha / jenkins-rce

  View on GitHub
  Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!
  ☆297Jun 10, 2019Updated 6 years ago
• LandGrey / abuse-ssl-bypass-waf

  View on GitHub
  Bypassing WAF by abusing SSL/TLS Ciphers
  ☆321Jul 27, 2021Updated 4 years ago
• Bo0oM / WAF-bypass-Cheat-Sheet

  View on GitHub
  Another way to bypass WAF Cheat Sheet (draft)
  ☆431Nov 28, 2018Updated 7 years ago
• whitel1st / docem

  View on GitHub
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆674Jan 28, 2024Updated 2 years ago
• random-robbie / Jira-Scan

  View on GitHub
  CVE-2017-9506 - SSRF
  ☆190Feb 14, 2022Updated 4 years ago
• enjoiz / XXEinjector

  View on GitHub
  Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
  ☆1,704Dec 1, 2024Updated last year
• r3dxpl0it / Apache-Superset-Remote-Code-Execution-PoC-CVE-2018-8021

  View on GitHub
  CVE-2018-8021 Proof-Of-Concept and Exploit
  ☆106Dec 3, 2018Updated 7 years ago
• TheTwitchy / xxer

  View on GitHub
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆518Jul 29, 2020Updated 5 years ago
• d3vilbug / HackBar

  View on GitHub
  HackBar plugin for Burpsuite
  ☆1,618Apr 15, 2021Updated 4 years ago
• summitt / Nope-Proxy

  View on GitHub
  TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.
  ☆1,656May 25, 2024Updated last year
• GerbenJavado / LinkFinder

  View on GitHub
  A python script that finds endpoints in JavaScript files
  ☆4,280Apr 13, 2024Updated last year
• mpgn / Spring-Boot-Actuator-Exploit

  View on GitHub
  Spring Boot Actuator (jolokia) XXE/RCE
  ☆324Jun 16, 2020Updated 5 years ago
• yassineaboukir / sublert

  View on GitHub
  Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed b…
  ☆1,028Feb 5, 2021Updated 5 years ago
• m4ll0k / Atlas

  View on GitHub
  Quick SQLMap Tamper Suggester
  ☆1,391Jul 18, 2022Updated 3 years ago
• l3m0n / Bypass_Disable_functions_Shell

  View on GitHub
  一个各种方式突破Disable_functions达到命令执行的shell
  ☆1,200Oct 17, 2023Updated 2 years ago
• staaldraad / xxeserv

  View on GitHub
  A mini webserver with FTP support for XXE payloads
  ☆342Jan 3, 2024Updated 2 years ago
• Coalfire-Research / java-deserialization-exploits

  View on GitHub
  A collection of curated Java Deserialization Exploits
  ☆592May 16, 2021Updated 4 years ago
• s0md3v / Arjun

  View on GitHub
  HTTP parameter discovery suite.
  ☆6,086Feb 20, 2025Updated 11 months ago
• ZeddYu / HTTP-Smuggling-Lab

  View on GitHub
  Use HTTP Smuggling Lab to learn HTTP Smuggling.
  ☆345Nov 20, 2022Updated 3 years ago