A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON
☆116Mar 27, 2024Updated 2 years ago
Alternatives and similar repositories for jsmug
Users that are interested in jsmug are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.☆116Jan 4, 2024Updated 2 years ago
- Leverages B64 chunks to split files and save to clipboard☆26Jul 30, 2026Updated 3 months ago
- Finds Documents On Cloud Assets Using grayhatwarfare API for short urls☆24Mar 2, 2022Updated 4 years ago
- Subdomains wordlist generted from subdomains of public bug bounty programs☆11Mar 25, 2025Updated last year
- PoC for House of Husk Exploit☆13Apr 3, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- study https://github.com/n132/Libc-GOT-Hijacking☆15Dec 7, 2023Updated 2 years ago
- A straightforward tool for exploiting SMTP Smuggling vulnerabilities.☆14Jul 22, 2024Updated 2 years ago
- One line command and control backdoors for APIs and web applications.☆52Apr 9, 2024Updated 2 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆91Feb 3, 2024Updated 2 years ago
- Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")☆57Dec 18, 2023Updated 2 years ago
- Chrome extension that passively finds debug parameters, sensitive headers and exposed paths (.env, .git, actuator) while you browse. Buil…☆247Feb 4, 2026Updated 8 months ago
- A collection of Server-Side Prototype Pollution gadgets and exploits☆242Feb 6, 2025Updated last year
- ☆40May 1, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.☆247Oct 8, 2024Updated 2 years ago
- A BurpSuite extension for vulnerability Scanning☆31Feb 16, 2024Updated 2 years ago
- A utility to fetch and display dns names from the SSL/TLS cert data☆14Aug 11, 2023Updated 3 years ago
- Fuzz anything with Program Environment Fuzzing☆399Jan 31, 2025Updated last year
- A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows☆308Sep 8, 2023Updated 3 years ago
- ☆71Oct 22, 2026Updated last week
- MCP(Model Context Protocol) Hack Toolkit☆11Sep 17, 2025Updated last year
- ☆147Mar 10, 2026Updated 7 months ago
- PolicyKit CVE-2021-3560 Exploitation (Authentication Agent)☆25Mar 6, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 3 years ago
- A MBR Fuzzer☆33Apr 3, 2024Updated 2 years ago
- Signatures for wraith used to detect secrets across various sources☆15Jul 8, 2022Updated 4 years ago
- This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.☆36May 14, 2022Updated 4 years ago
- Tool to download IP ranges of CDN providers for bug bounties☆14Updated this week
- ☆65Mar 10, 2026Updated 7 months ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆232Aug 25, 2026Updated 2 months ago
- Everything about xss protection technology☆15Oct 22, 2019Updated 7 years ago
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆39May 5, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Gourlex is a simple tool that can be used to extract URLs and paths from web pages.☆258Mar 28, 2024Updated 2 years ago
- A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities☆67Mar 18, 2024Updated 2 years ago
- For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)☆54Feb 26, 2025Updated last year
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…☆453Oct 26, 2026Updated last week
- experimental wildcard subdomain filtering prototype☆14Aug 5, 2023Updated 3 years ago
- ☆43Nov 15, 2025Updated 11 months ago