Blog about HTTP Request Smuggling, including a demo application.
β32Jan 4, 2022Updated 4 years ago
Alternatives and similar repositories for http-request-smuggling
Users that are interested in http-request-smuggling are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- β29Jan 10, 2023Updated 3 years ago
- An easy to navigate list of unicode characters that have risky transformations π₯β26Mar 22, 2022Updated 4 years ago
- Resources to learn about Insecure Deserializationβ22Jul 12, 2024Updated 2 years ago
- A repo about CTF challenges that I made at several CTF eventsβ14Mar 20, 2025Updated last year
- β22Aug 3, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer β’ AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Challenge source code and author write-ups for KalmarCTFβ69Apr 15, 2026Updated 6 months ago
- My GitHub lair where the web3 security magic happens!β15Oct 30, 2026Updated last week
- Platform for LA CTF. Forked from redpwn/rctf.β11Feb 6, 2026Updated 9 months ago
- An introduction of gRPC implemented in Golangβ14Mar 26, 2021Updated 5 years ago
- This a Complete tool contained box for Capture The Flag competition. Mostly I have inserted all the necessary tools. Some of the people hβ¦β11Apr 16, 2022Updated 4 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cacheβ20Jan 19, 2020Updated 6 years ago
- This project is a Dockerized WordPress development environment with two configurations, one using Nginx and the other using Apache. It inβ¦β10May 29, 2025Updated last year
- β21Dec 1, 2025Updated 11 months ago
- cve-2014-0130 rails directory traversal vulnβ18May 15, 2017Updated 9 years ago
- Virtual machines for every use case on DigitalOcean β’ AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Summary and archive of Vatican .va (Holy See) ccTLD zone data for researchers.β14Apr 26, 2023Updated 3 years ago
- Accompanying material needed for the workshopβ11Jun 14, 2023Updated 3 years ago
- A handy plugin for copying requests/responses directly from Burp, some extra magic included.β13Oct 15, 2021Updated 5 years ago
- Writeup for the challenges in H@cktivityCon CTF 2020β17Aug 6, 2020Updated 6 years ago
- SAP penetration testing Web and network cheatsheetβ17May 15, 2022Updated 4 years ago
- 2020 εΉ΄εΊ¦ IT ι΅δΊΊθ³½ , ζΊεθ³ζ - δΈ»ι‘ " Electron "β13Oct 5, 2023Updated 3 years ago
- Place for random PoCsβ17May 21, 2020Updated 6 years ago
- This repository contains the source code for the TCP1P Capture The Flag (CTF) challenge conducted during Ramadhan in 2024.β12Oct 28, 2026Updated last week
- A curated list of awesome blogs and tools about HTTP request smuggling attacks. Feel free to contribute! π»β128Sep 6, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer β’ AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ctfify is a powerful command-line tool for downloading and managing Capture The Flag (CTF) challenges. With ctfify, you can easily find aβ¦β12Oct 4, 2025Updated last year
- The setup being used for mobile exploitation in the TCP1P CTF 2023β13Nov 17, 2023Updated 2 years ago
- β23Sep 12, 2025Updated last year
- S3 Buckets that will let you list all files inside themβ14Apr 26, 2018Updated 8 years ago
- Write up LKS Cyber Security Tingkat Nasionalβ11Feb 10, 2021Updated 5 years ago
- HTTP request smuggling attack helper/CLI tools to manipulate HTTP packetsβ36Sep 23, 2022Updated 4 years ago
- A tool to test working urls.β42Nov 17, 2020Updated 5 years ago
- Tutorial Linux x64 Assembly Bahasa Indonesiaβ39Jun 10, 2026Updated 4 months ago
- CTFd plugin allowing for individual Docker containers per user or teamβ12Oct 14, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer β’ AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- NodeJS script to extract assets for the Apple bug bounty program from their security acknowledgments page for bug bounty recon.β79Nov 5, 2022Updated 4 years ago
- An introduction course to system exploitation based on pwnable.kr challengesβ24Feb 21, 2025Updated last year
- β33May 30, 2019Updated 7 years ago
- β18Jun 24, 2021Updated 5 years ago
- https://sites.google.com/securifyinc.com/secblogs/finding-leaked-sensitive-dataβ17Jun 14, 2018Updated 8 years ago
- A modular URL deduplication tool.β18Feb 19, 2025Updated last year
- Automated Recon Tool Installerβ16Jun 29, 2022Updated 4 years ago