jwt-reauth

JWT Re-auth Burp plugin to cache authentication tokens from an "auth" URL, and then add them as headers on all requests going to a certain scope. Features The plugin allows settings to be sent to it via context menus from various menus. This includes using an entire captured request to acquire ne...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

dalfox

Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...

TomcatKiller-CVE-2025-31650

TomcatKiller-CVE-2025-31650 A tool designed to detect the vulnerability CVE-2025-31650 in Apache Tomcat versions 10.1.10 to 10.1.39 This vulnerability allows an attacker to trigger a memory leak by sending specially crafted HTTP/2 requests with invalid priority headers, leading to a...

CVE-2024-38063

CVE-2024-38063 Overview In August 2024, Microsoft released a patch for a Windows TCP/IP Remote Code Execution RCE vulnerability. Some researchers have already published Proofs of ConceptPoC for this vulnerability, and around the same time, PatchPoint researchers also completed their analysis and...

log4j2burpscanner

log4j2burpscanner CVE-2021-44228, log4j2 Burp plugin Java version. DNSlog uses non-dnslog.cn domain names. Effect demonstration: Target range the range is relatively slow, but internet assets are fine. The reason might be that the range handles other request headers poorly, or the headers are too...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

cve-2026-22732-demo

CVE-2026-22732 Demo Minimal reproduction of CVE-2026-22732 — Spring Security HTTP response headers silently dropped when controller code writes directly to the servlet response. The Vulnerability Spring Security uses "lazy" header writing by default. When a controller writes to...

CVE-2025-55315-Scanner-Monitor

CVE-2025-55315 Vulnerability Scanner and TLS Proxy This repository contains tools to detect and monitor ASP.NET Core applications vulnerable to CVE-2025-55315, which involves HTTP request smuggling due to conflicting HTTP headers. Tools Included 1. Python Vulnerability Scanner...

CVE-2026-21710

CVE-2026-21710 — Node.js req.headersDistinct DoS Summary Field| Value ---|--- CVE ID| CVE-2026-21710 Published| 2026-03-30 CVSS v3.1| 7.5 HIGH AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE| CWE-770 — Allocation of Resources Without Limits or Throttling Affected| Node.js 20.x, 22.x, 24.x, 25.x Fixed in|...

EyeWitness

EyeWitness - Web Screenshot Tool EyeWitness is designed to take screenshots of websites, provide server header info, and identify default credentials if known. Now powered by Chromium browser for better reliability and easier installation. 🚀 Key Features Cross-platform support - Windows, Linux,...

nginxconfig.io

⚙️ NGINX configuration generator on steroids 💉 The only tool you'll ever need to configure your NGINX server. do.co/nginxconfig » Report a bug · Request a feature ✨ NGINX Config NGINX is so much more than just a webserver. You already knew that, probably. We love NGINX, because: Low memory usage...

log4j2-CVE-2021-45046

Sample Log4j2 vulnerable application CVE-2021-45046 Versions Affected: all versions from 2.0-beta9 to 2.15.0 This application is based on Spring Boot web application vulnerable to CVE-2021-45046 It uses Log4j 2.14.1 through spring-boot-starter-log4j2 2.6.1. Running the application Run it: Import...

headerpwn

headerpwn A fuzzer for analyzing how servers respond to different HTTP headers. 🏗️ Install ⛏️ Usage 📡 Proxying HTTP Requests Install To install headerpwn, run the following command: go install github.com/devanshbatham/[email protected] Usage headerpwn allows you to test various headers on a...

EyeWitness

EyeWitness EyeWitness is designed to take screenshots of websites provide some server header info, and identify default credentials if known. EyeWitness is designed to run on Kali Linux. It will auto detect the file you give it with the -f flag as either being a text file with URLs on each new...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – DKIM Signature Verification Bypass Header Canonicalization Flaw Program Code Python email parsing simulation dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From: [email protected] To: [email protected]...

L4sh

Log4Shell RCE Exploit fully independent exploit does not require any 3rd party binaries. The exploit spraying the payload to all possible logged HTTP Headers such as X-Forwarding , Server-IP , User-Agent Usage python main.py -i lhost -u http://target:targetport -c "commandtoexecute" -p lhttpport ...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...