p4k03n4t0r / http-request-smugglingLinks
Blog about HTTP Request Smuggling, including a demo application.
☆32Updated 3 years ago
Alternatives and similar repositories for http-request-smuggling
Users that are interested in http-request-smuggling are comparing it to the libraries listed below
Sorting:
- Searcher for cross-site leaks (XS-Leaks)☆82Updated 2 years ago
- Security Advisories☆34Updated 3 weeks ago
- ☆23Updated 7 months ago
- HTTP request smuggling attack helper/CLI tools to manipulate HTTP packets☆35Updated 3 years ago
- A collection of utilities for building extensions using Burp's Montoya API☆52Updated this week
- Same Origin XSS challenge☆64Updated 3 years ago
- Web CTF CheatSheet 🐈☆27Updated 4 years ago
- Challenges I wrote for various CTF competitions☆44Updated last year
- ☆41Updated this week
- This repo contains solution for ctf challenges☆37Updated 10 months ago
- A cheatsheet for exploiting server-side SVG rasterization.☆30Updated 3 years ago
- Android webviews and securiy☆23Updated last month
- ☆27Updated 2 years ago
- WordPress - Authenticated XXE (CVE-2021-29447)☆42Updated 4 years ago
- LFI to RCE via phpinfo() assistance or via controlled log file☆72Updated 2 years ago
- CVE-2022-21907 Vulnerability PoC☆30Updated 3 years ago
- A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.☆29Updated last year
- An intentionally-vulnerable application for demonstrating the hazards of SpEL expression composition☆28Updated 7 years ago
- ☆169Updated 4 years ago
- ☆56Updated 4 years ago
- CVE-2023-33733 reportlab RCE☆118Updated 2 years ago
- Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)☆90Updated last year
- The following package is the standalone wordlist-only component to flask-unsign.☆42Updated last year
- Prototype Pollution exploits collection☆34Updated 4 years ago
- A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities☆67Updated last year
- Exploit code for Jira Mobile Rest Plugin SSRF (CVE-2022-26135)☆88Updated 3 years ago
- ☆21Updated last month
- Encode and Fuzz Custom Protobuf Messages in Burp Suite☆33Updated 7 months ago
- PoC repository for CVE-2023-29007☆35Updated 2 years ago
- lightyear is a tool to dump files in tedious (blind) conditions using PHP filters☆105Updated 4 months ago