kleiton0x00/HTTP-Smuggling-Calculator

Stars
67
Rank 462,689 (Top 10 %)
Language
Python
Created over 3 years ago
Updated over 2 years ago

kleiton0x00/HTTP-Smuggling-Calculator

kleiton0x00

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Perform TE.CL HTTP Request Smuggling attacks by crafting HTTP Request automatically.

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

Proxy-DLL-Loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

XSScope

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

RedditC2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

Shelltropy

A technique of hiding malicious shellcode via Shannon encoding.

RemoteShellcodeExec

Execute shellcode from a remote-hosted bin file using Winhttp.

CORS-one-liner

A one liner Bash command which finds CORS in every possible endpoint.

CRLF-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.

Todesstern

A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities

contexter

Contexter - A secondary context path traversal / server-side parameter pollution testing tool written in Python 3

kleiton0x00.github.io

kleiton0x00