A list of ReDoS vulnerabilities in npm modules found by the Software Lab at TU Darmstadt. For each vulnerability, there is a proof-of-concept exploit, showing how the slowdown may occur. The resources in this repository are provided for research purpose only. Please read below for more details.
☆60Dec 6, 2017Updated 8 years ago
Alternatives and similar repositories for ReDoS-vulnerabilities
Users that are interested in ReDoS-vulnerabilities are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts and auxiliary files for fuzzing PHP's unserialize function☆46Aug 13, 2017Updated 9 years ago
- CVE-2018-6546-Exploit☆41Apr 15, 2018Updated 8 years ago
- ☆11Aug 9, 2017Updated 9 years ago
- ☆23May 19, 2019Updated 7 years ago
- This is a small extension to make graphql readable☆30Dec 14, 2018Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Sorta reverse implementation of ShoVAT - Also includes NMAP banner regex results☆16Dec 28, 2018Updated 7 years ago
- A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities☆16Feb 13, 2017Updated 9 years ago
- Filet-O-Firewall Vulnerability PoC☆61Sep 4, 2015Updated 11 years ago
- This extension replaces the default repeater tab name with the URL path of the repeater request.☆25Sep 3, 2021Updated 5 years ago
- ☆32Jul 17, 2019Updated 7 years ago
- Highlight Burp proxy requests made by different browsers☆29Sep 21, 2017Updated 9 years ago
- Encima De la Mosca HTTP proxy POC for infecting files on-the-fly and SSLstrip2☆40Sep 1, 2018Updated 8 years ago
- Decentralized DNS fuzzer to mitigate ISP Snooping☆12May 3, 2017Updated 9 years ago
- Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.☆12Sep 30, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆15Feb 26, 2018Updated 8 years ago
- A DNS server that balances queries amongst a number of public DNS servers☆11Updated this week
- Tinkering with bits and bytes☆11Dec 14, 2024Updated last year
- Simple DDE object detector☆56Nov 24, 2017Updated 8 years ago
- ☆73Dec 5, 2019Updated 6 years ago
- ☆13Mar 6, 2021Updated 5 years ago
- SecrutiyTube Linux Assembly Exam☆11Dec 30, 2019Updated 6 years ago
- Generates Flash based CORS CSRF Proof of Concepts that can be sent directly to clients☆14Jul 3, 2013Updated 13 years ago
- A passive scanning tool for finding expired domain vulnerabilities while you browse.☆42Feb 6, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scripts that I've written that others may find useful☆14Aug 17, 2022Updated 4 years ago
- Windows Privesc Check☆20May 20, 2014Updated 12 years ago
- super-Django-CC is a simle web interface for commoncrawl.org☆14Dec 8, 2022Updated 3 years ago
- ☆39Jul 3, 2020Updated 6 years ago
- This offline tool is not supported and is provided for informational purposes only.☆14Sep 26, 2014Updated 12 years ago
- Color scheme inspired by the art of Rubens LP☆11Jul 14, 2015Updated 11 years ago
- B-Sides CBR 2018 talk about group policy and Grouper☆37May 3, 2019Updated 7 years ago
- Ressources for the regular meeting of distribution security teams☆10Oct 27, 2026Updated last week
- A small web app to check if your (Australian) voicemail is vulnerable to information disclosure.☆13Jul 15, 2014Updated 12 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Predict people interest in renting specific NYC apartments. The challenge combines structured data, geolocalization, time data, free text…☆18Nov 4, 2017Updated 8 years ago
- A tool for detecting XML External Entity (XXE) vulnerabilities in Java applications☆73Sep 4, 2014Updated 12 years ago
- A small tool that silently converts TCP sockets to Unix sockets.☆11Aug 8, 2015Updated 11 years ago
- Temporal-Comorbidity Adjusted Risk of Emergency Readmission☆10Dec 23, 2017Updated 8 years ago
- Ableton Live extension — cyclic OLA time stretch☆12Jun 3, 2026Updated 5 months ago
- Document tracing and tracking. Dracker lets you "tag" documents with a phone home call when MS Word documents are opened. This applicatio…☆14Mar 26, 2014Updated 12 years ago
- Curso realizado por Ricardo Narvaja de CrackLatinos (Mirror) http://ricardonarvaja.info☆12May 28, 2018Updated 8 years ago