monsoon

monsoon A fast HTTP enumerator that allows you to execute a large number of HTTP requests, filter the responses and display them in real-time monsoon is a fast and flexible HTTP fuzzer that can be used for a wide variety of actions ranging from content discovery to credential bruteforcing. You ca...

t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021. BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with...

headerpwn

headerpwn 서버가 다양한 HTTP 헤더에 어떻게 응답하는지 분석하기 위한 퍼저입니다. 🏗️ 설치 ⛏️ 사용법 📡 HTTP 요청 프록시 설치 headerpwn을 설치하려면 다음 명령어를 실행하세요: go install github.com/devanshbatham/[email protected] 사용법 headerpwn을 사용하면 대상 URL에 다양한 헤더를 테스트하고 응답을 분석할 수 있습니다. 도구 사용 방법은 다음과 같습니다: 1. -url 플래그를 사용하여 대상 URL을 제공합니다. 2. 테스트할 헤더를 한...

httpfuzz-robomiller

httpfuzz-robomiller CVE-2010-1411을 찾기 위해 사용된 멍청한 퍼저 기반 cmiller-csw-2010.pdf 원숭이 군대 돌보기 https://fuzzinginfo.files.wordpress.com/2012/05/cmiller-csw-2010.pdf...

UPDATE: Gloom-Framework v1.7.5

PenTestIT RSS Feed Update time guys! Please refer my initial blog post about this open source penetration testing framework for Kali Linux. I just saw that it has been updated and we now have Gloom-Framework v1.7.5 with new features and a lot of bug fixes. Actually, it was updated quiet a number ...

Acunetix Release Web Site Security Pen Testing Tools Free

HTTP editor, fuzzer and sniffer tools help pen testers identify vulnerabilities London, UK – January 2016 – Hot on the release of Acunetix Version 11, pioneering web application security software Acunetix, now delivering Manual Pen Testing Tools at no cost. Penetration testers can make use of an...