rudSarkar / crlf-injector
A CRLF ( Carriage Return Line Feed ) Injection attack occurs when a user manages to submit a CRLF into an application. This is most commonly done by modifying an HTTP parameter or URL.
☆47Updated 2 years ago
Alternatives and similar repositories for crlf-injector:
Users that are interested in crlf-injector are comparing it to the libraries listed below
- OWASP Skanda - SSRF Exploitation Framework☆37Updated 11 years ago
- Extension providing view with filtering capabilities for both complete and incomplete requests from all burp tools.☆48Updated 4 years ago
- Burp Suite plugin created for using Collaborator tool during manual testing in a comfortable way!☆103Updated 6 years ago
- CORS checking☆35Updated 6 years ago
- Burp extension☆57Updated 6 years ago
- Fuzzing for LFI using Burpsuite☆61Updated 8 years ago
- Burp Suite Attack Selector Plugin☆61Updated 7 years ago
- XSS Payloads☆49Updated 9 years ago
- Burp extension to passively scan for applications revealing software version numbers☆30Updated 8 months ago
- Extension adds a new tab in Burp Suite called Extractor☆43Updated 5 years ago
- ☆42Updated 4 years ago
- Another plugin for CRLF vulnerability detection☆26Updated 8 years ago
- ☆70Updated 7 years ago
- ActionScript Proof of Concept to perform cross-domain reads☆44Updated 11 years ago
- Simple Server Side Request Forgery services enumeration tool.☆54Updated 6 years ago
- An interactive OOB XXE data exfiltration tool☆91Updated 7 years ago
- Study about HQL injection exploitation.☆50Updated 8 years ago
- Repository to hold materials for DefCon_RESTing presentation by Dinis, Abe and Alvaro☆52Updated 11 years ago
- Penetration Testing Tools Developed by AppSec Consulting.☆48Updated 6 years ago
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆136Updated 4 years ago
- CVE-2018-7600 - Drupal 7.x RCE☆71Updated 6 years ago
- A tool that can take a URL or list of URL and prints back SAML consume URL.☆36Updated 6 years ago
- RCE Exploit PoC for Spring based RESTFul APIs using XStream as Unmarshaler☆20Updated 11 years ago
- Various tools for managing bug bounty recon and exploration.☆47Updated 2 years ago
- A proof of concept that demonstrates asynchronous scanning for Java deserialization bugs☆54Updated 7 years ago
- Proof of concept showing how to exploit the CVE-2018-11759☆41Updated 6 years ago
- A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.☆43Updated 4 years ago
- ZIP File Raider - Burp Extension for ZIP File Payload Testing☆70Updated 4 years ago
- ☆44Updated 8 years ago
- An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match☆42Updated 12 years ago