t-reqs

T-Reqs HTTP Fuzzer T-Reqs T wo Req uests is a grammar-based HTTP Fuzzer written as a part of the paper titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021. BibTeX of the paper: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with...

httpfuzz-robomiller

httpfuzz-robomiller Dumb Fuzzer used to find CVE-2010-1411 based on cmiller-csw-2010.pdf Babysitting an Army of Monkeys https://fuzzinginfo.files.wordpress.com/2012/05/cmiller-csw-2010.pdf...

monsoon

monsoon A fast HTTP enumerator that allows you to execute a large number of HTTP requests, filter the responses and display them in real-time monsoon is a fast and flexible HTTP fuzzer that can be used for a wide variety of actions ranging from content discovery to credential bruteforcing. You ca...

headerpwn

headerpwn Un fuzzer para analizar cómo responden los servidores a diferentes cabeceras HTTP. 🏗️ Instalación ⛏️ Uso 📡 Proxy de solicitudes HTTP Instalación Para instalar headerpwn, ejecuta el siguiente comando: go install github.com/devanshbatham/[email protected] Uso headerpwn te permite...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-buffer-overflow in process_chunked_data

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6211846364987392 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-buffer-overflow READ...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-use-after-free in check_connection

Detailed Report: https://oss-fuzz.com/testcase?key=5647136884654080 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-use-after-free READ 6 Crash Address: 0x603000000565 Crash State:...

fluent-bit:flb-it-fuzz-http_fuzzer_OSSFUZZ: Heap-double-free in flb_free

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6257779226181632 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-httpfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Heap-double-free Crash...

UPDATE: Gloom-Framework v1.7.5

PenTestIT RSS Feed Update time guys! Please refer my initial blog post about this open source penetration testing framework for Kali Linux. I just saw that it has been updated and we now have Gloom-Framework v1.7.5 with new features and a lot of bug fixes. Actually, it was updated quiet a number ...

Acunetix Release Web Site Security Pen Testing Tools Free

HTTP editor, fuzzer and sniffer tools help pen testers identify vulnerabilities London, UK – January 2016 – Hot on the release of Acunetix Version 11, pioneering web application security software Acunetix, now delivering Manual Pen Testing Tools at no cost. Penetration testers can make use of an...