riramar / h2rs
Detects request smuggling via HTTP/2 downgrades.
☆92Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for h2rs
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆130Updated 3 years ago
- Prototype Pollution Scanner☆101Updated 3 years ago
- Trickest Workflow for discovering log4j vulnerabilities and gathering the newest community payloads.☆112Updated 2 years ago
- ☆89Updated 3 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆117Updated last year
- Extract JavaScript files from burp suite project with ease.☆78Updated 2 years ago
- ☆68Updated 2 years ago
- 🔭 Collection of regexp pattern for security passive scanning☆114Updated last year
- ☆92Updated 3 years ago
- A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.☆102Updated 2 years ago
- Script to test open Akamai ARL vulnerability.☆70Updated 3 years ago
- This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response ma…☆78Updated last year
- The project aims at creating target-specific wordlists for any web application that you are testing.☆63Updated 2 years ago
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆162Updated 3 years ago
- Check AWS S3 instances for read/write/delete access☆121Updated 2 years ago
- Searching for virtual hosts among non-resolvable domains☆86Updated 4 years ago
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆95Updated 3 years ago
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆65Updated 3 years ago
- A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.☆35Updated 2 years ago
- ☆91Updated 4 years ago
- Golang tool which helps dropping the irrelevant entries from your ffuf result file.☆128Updated 2 months ago
- This repository stores some of my custom BCheck Scan configurations. Its goal is to identify intriguing elements that warrant further man…☆86Updated 9 months ago
- Real world bug bounty wordlists☆110Updated last year
- A tool for append URLs, skipping duplicates/paths & combine parameters.☆118Updated 2 years ago
- ☆56Updated 8 months ago
- All known and unknown public POC's for wordpress themes and plugins☆78Updated 3 years ago
- nuclei-bb-templates☆48Updated 2 years ago
- ☆65Updated last year
- Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.☆59Updated 7 months ago