nccgroup / requests-racer
Small Python library that makes it easy to exploit race conditions in web apps with Requests.
☆158Updated last year
Alternatives and similar repositories for requests-racer:
Users that are interested in requests-racer are comparing it to the libraries listed below
- Predict Mongo ObjectIds☆127Updated 6 years ago
- 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️☆197Updated 5 years ago
- Automatic tool for DNS rebinding-based SSRF attacks☆297Updated 4 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆258Updated 3 years ago
- Code execution via Python package installation.☆169Updated 6 years ago
- A natural evolution of Burp Suite's Repeater tool☆194Updated last year
- ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.☆102Updated 6 years ago
- Race Condition framework☆268Updated 2 years ago
- Piper Burp Suite Extender plugin☆116Updated 11 months ago
- notes and code on past CTFs☆102Updated 3 years ago
- vulnerable single sign on☆147Updated 6 months ago
- ☆170Updated 3 years ago
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…☆283Updated last month
- Tool for catching and logging different types of requests.☆220Updated 4 years ago
- Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).☆123Updated last year
- Evenly distributes scanner load across targets☆84Updated 2 years ago
- Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …☆221Updated 2 years ago
- Issues with WebSocket reverse proxying allowing to smuggle HTTP requests☆351Updated 6 months ago
- HTTPWookiee is an HTTP server and proxy stress tool (respect of RFC, HTTP Smuggling issues, etc). If you run an HTTP server project conta…☆50Updated 7 years ago
- Push notifications for passive DNS data☆107Updated 8 years ago
- Burp Suite Extension to monitor new scope☆197Updated 3 years ago
- Everything you need about Burp Extension Generation☆152Updated 2 years ago
- find hardcoded strings from source code☆273Updated 3 years ago
- Security Testing Scripts for JWT☆311Updated 2 years ago
- Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.☆266Updated 2 weeks ago
- Pentest/BugBounty progress control with scanning modules☆283Updated 4 years ago
- Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.☆467Updated 5 years ago
- Python automation of Docker.sock abuse☆211Updated 2 years ago
- Use HTTP Smuggling Lab to learn HTTP Smuggling.☆347Updated 2 years ago
- secretz, minimizing the large attack surface of Travis CI☆325Updated 2 years ago