HTTPWookiee is an HTTP server and proxy stress tool (respect of RFC, HTTP Smuggling issues, etc). If you run an HTTP server project contact me for private repository access with more tests.
☆50Dec 2, 2017Updated 8 years ago
Alternatives and similar repositories for HTTPWookiee
Users that are interested in HTTPWookiee are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.☆12Sep 30, 2018Updated 8 years ago
- ☆15May 23, 2019Updated 7 years ago
- Burp Suite AMF Extension☆49Sep 24, 2018Updated 8 years ago
- ☆34Nov 2, 2022Updated 3 years ago
- CVE-2020-28243 Local Privledge Escalation Exploit in SaltStack Minion☆20Mar 3, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- glibc getcwd() local privilege escalation compiled binaries☆31Feb 9, 2018Updated 8 years ago
- ☆15Jan 2, 2019Updated 7 years ago
- ☆14Feb 7, 2018Updated 8 years ago
- Quick tests to evaluate the safety of various .NET XML Parsers with respect to XXE injection☆11Apr 8, 2020Updated 6 years ago
- cve-2014-0130 rails directory traversal vuln☆18May 15, 2017Updated 9 years ago
- Proof of Concept for CVE-2018-11776☆21Sep 12, 2018Updated 8 years ago
- ☆13Oct 3, 2023Updated 3 years ago
- ☆13May 16, 2019Updated 7 years ago
- ☆84Oct 8, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Collection of scripts that aid in penetration testing of JSON Web Tokens☆58Feb 2, 2019Updated 7 years ago
- Burp Suite Attack Selector Plugin☆62Nov 23, 2017Updated 8 years ago
- ☆52Jul 20, 2020Updated 6 years ago
- Try to detect HTTP desync attack (https://portswigger.net/blog/http-desync-attacks-request-smuggling-reborn)☆11Sep 20, 2019Updated 7 years ago
- LDAP Injection Vulnerability Application(Blog Sample Code)☆21Jun 9, 2026Updated 4 months ago
- My CTF Challenges. No one plays.☆13Dec 4, 2022Updated 3 years ago
- ☆17Oct 25, 2018Updated 8 years ago
- 2 web tasks from ZeroNights HackQuest 2016☆49Mar 24, 2017Updated 9 years ago
- ☆14Nov 29, 2019Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CVE-2019-6467 (BIND nxdomain-redirect)☆26Apr 25, 2019Updated 7 years ago
- A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…☆12Jun 29, 2015Updated 11 years ago
- Study about HQL injection exploitation.☆52May 15, 2016Updated 10 years ago
- Native Java serialization filter blacklist for common gadgets☆20Sep 12, 2019Updated 7 years ago
- Security test tool for Blind XSS☆28Mar 5, 2020Updated 6 years ago
- laravel 5.8 rce pop chain☆26Oct 27, 2019Updated 7 years ago
- justCTF 2019 challenges sources☆41Jun 9, 2021Updated 5 years ago
- CVE-2021-2109 && Weblogic Server RCE via JNDI☆31Jan 22, 2021Updated 5 years ago
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Get all the CNs from a list of domains☆46Aug 17, 2021Updated 5 years ago
- Exploit code developed/reproduced by me☆89Jan 25, 2023Updated 3 years ago
- CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4☆68Feb 3, 2020Updated 6 years ago
- ☆15Feb 26, 2018Updated 8 years ago
- ☆564Mar 27, 2025Updated last year
- CVE-2020-8840：FasterXML/jackson-databind 远程代码执行漏洞☆37Feb 24, 2020Updated 6 years ago
- Objectify-s3 is a tool that recursively checks AWS S3 buckets and objects for misconfigured permissions.☆15Sep 19, 2026Updated last month