p4k03n4t0r / http-request-smugglingLinks
Blog about HTTP Request Smuggling, including a demo application.
☆33Updated 3 years ago
Alternatives and similar repositories for http-request-smuggling
Users that are interested in http-request-smuggling are comparing it to the libraries listed below
Sorting:
- Searcher for cross-site leaks (XS-Leaks)☆83Updated 3 years ago
- ☆28Updated 2 years ago
- Same Origin XSS challenge☆64Updated 3 years ago
- ☆25Updated 9 months ago
- ☆169Updated 4 years ago
- An intentionally-vulnerable application for demonstrating the hazards of SpEL expression composition☆28Updated 7 years ago
- Security Advisories☆35Updated last month
- ☆41Updated last month
- Awesome MXSS ??☆56Updated last year
- ☆56Updated 4 years ago
- A collection of Burp Suite Lambda Filters ~ Bambdas☆30Updated last year
- Prototype Pollution exploits collection☆37Updated 4 years ago
- Updated version of the ProtoBurp Extension, with enhanced features and capabilities to encode and fuzz custom protobuf messages☆36Updated 2 years ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆72Updated 2 years ago
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆109Updated 6 months ago
- Client-Side Prototype Pollution Tools☆85Updated 4 years ago
- A cheatsheet for exploiting server-side SVG rasterization.☆30Updated 3 years ago
- A collection of utilities for building extensions using Burp's Montoya API☆52Updated last month
- CTF challenges WriteUp☆14Updated 3 years ago
- HTTP request smuggling attack helper/CLI tools to manipulate HTTP packets☆35Updated 3 years ago
- This repo contains solution for ctf challenges☆38Updated last year
- This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a p…☆112Updated last year
- Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.☆66Updated last year
- Wordlist to bruteforce for LFI☆128Updated 6 years ago
- CVE-2023-33733 reportlab RCE☆117Updated 2 years ago
- The following package is the standalone wordlist-only component to flask-unsign.☆42Updated last year
- WordPress - Authenticated XXE (CVE-2021-29447)☆43Updated 4 years ago
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆35Updated 9 months ago
- Challenges I wrote for various CTF competitions☆45Updated last year
- an Evil Java RMI Registry.☆51Updated 2 years ago