This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.
☆36May 14, 2022Updated 4 years ago
Alternatives and similar repositories for h2csmuggler-proxy
Users that are interested in h2csmuggler-proxy are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆35Aug 30, 2022Updated 4 years ago
- Chameleon Wordlists☆15Sep 13, 2022Updated 4 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Jul 30, 2022Updated 4 years ago
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.☆60Jan 22, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Identify VMess packets in network traffic☆13Nov 21, 2022Updated 3 years ago
- Let's check if your target is vulnerable for client side prototype pollution.☆64Jan 9, 2024Updated 2 years ago
- Spring4Shell reproduce☆11Apr 1, 2022Updated 4 years ago
- Python Script to Exploit SpoolService/Printer Bug on Exchange - Thanks to @3xocyte☆24Sep 2, 2019Updated 7 years ago
- ☆15Dec 16, 2021Updated 4 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- BurpSuite extension to convert requests into bcheck scripts☆34Jul 18, 2023Updated 3 years ago
- ☆38Apr 24, 2024Updated 2 years ago
- Unpack the source code of React and other Webpacked apps!☆118Sep 30, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- vRealize RCE + Privesc (CVE-2021-21975, CVE-2021-21983, CVE-0DAY-?????)☆37Apr 7, 2021Updated 5 years ago
- ☆24Aug 12, 2026Updated 2 months ago
- The following package is the standalone wordlist-only component to flask-unsign.☆45Jun 15, 2024Updated 2 years ago
- Java安全研究与安全开发面试题库，同是也是常见知识点的梳理和总结，包含问题和详细的答案，计划定期更新☆16Apr 30, 2022Updated 4 years ago
- PoC for CVE-2022-23940☆15May 7, 2025Updated last year
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆191Dec 3, 2024Updated last year
- ☆99Dec 4, 2025Updated 10 months ago
- 🔭 Collection of regexp pattern for security passive scanning☆116Feb 18, 2023Updated 3 years ago
- PP-finder Help you find gadget for prototype pollution exploitation☆210May 15, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Burp Suite extension which augments your proxy traffic by injecting log4shell payloads into headers☆42Dec 13, 2021Updated 4 years ago
- A small PoC for the recent RCE found in the Goahead Webserver prior to version 5.1.5.☆23Oct 18, 2021Updated 5 years ago
- Public disclosure channel for security vulnerabilities☆16Nov 17, 2025Updated 11 months ago
- ☆15Oct 25, 2021Updated 5 years ago
- A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON☆116Mar 27, 2024Updated 2 years ago
- CrackQL is a GraphQL password brute-force and fuzzing utility.☆352Aug 3, 2024Updated 2 years ago
- Client-Side Prototype Pollution Tools☆90Sep 21, 2021Updated 5 years ago
- ServiceNow widge-simple-list misconfiguration scanner☆68Nov 16, 2023Updated 2 years ago
- 分享在建设安全管理体系、ISO27001、等级保护、安全评审过程中的点点滴滴☆23Aug 27, 2018Updated 8 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆24Aug 20, 2026Updated 2 months ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- 识别操作系统指纹☆20Jan 17, 2022Updated 4 years ago
- Web Server that serves a single file and keeps the connection open until user releases it.☆74Nov 27, 2013Updated 12 years ago
- A natural evolution of Burp Suite's Repeater tool☆202Apr 15, 2026Updated 6 months ago
- BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.☆66May 2, 2025Updated last year
- ☆51Jan 25, 2022Updated 4 years ago