nccgroup / requests-racer
Small Python library that makes it easy to exploit race conditions in web apps with Requests.
☆159Updated last year
Alternatives and similar repositories for requests-racer:
Users that are interested in requests-racer are comparing it to the libraries listed below
- Automatic tool for DNS rebinding-based SSRF attacks☆299Updated 4 years ago
- 🏴☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴☠️☆199Updated 6 years ago
- A natural evolution of Burp Suite's Repeater tool☆197Updated last year
- Predict Mongo ObjectIds☆130Updated 6 years ago
- find hardcoded strings from source code☆277Updated 3 years ago
- Piper Burp Suite Extender plugin☆120Updated last year
- Everything you need about Burp Extension Generation☆153Updated 2 years ago
- Code execution via Python package installation.☆170Updated 6 years ago
- notes and code on past CTFs☆103Updated 3 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆259Updated 3 years ago
- Race Condition framework☆269Updated 2 years ago
- Tool for catching and logging different types of requests.☆220Updated 4 years ago
- IPFuscator - A tool to automatically generate alternative IP representations☆365Updated last year
- ☆173Updated 3 years ago
- Payloads for CRLF Injection☆223Updated 6 months ago
- SSRF testing tool☆244Updated 2 years ago
- A simple SSRF-testing sheriff written in Go☆326Updated 5 months ago
- A lab to play with authentication and authorisation problems☆95Updated 2 years ago
- This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …☆258Updated 2 years ago
- This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…☆286Updated 3 months ago
- ☆148Updated 3 years ago
- A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering☆210Updated 4 years ago
- Adds a customizable "Send to..."-context-menu to your BurpSuite.☆155Updated 2 years ago
- Simple python script to extract unsafe functions from php projects☆199Updated 7 years ago
- [A]ndroid [A]pplication [P]entest [G]uide☆124Updated 5 years ago
- Various Payload wordlists☆235Updated 4 years ago
- A cheat sheet for attacking SQLite via SQLi☆99Updated 9 years ago
- Notes/Tools for pentesting☆82Updated last year
- Evenly distributes scanner load across targets☆85Updated 2 weeks ago
- DNS Rebinding Exploitation Framework☆489Updated 3 years ago