t-reqs

T-Reqs HTTP Fuzzer T-Reqs（两 个请求 ）是一个基于语法的HTTP Fuzzer，作为论文T-Reqs: HTTP Request Smuggling with Differential Fuzzing的一部分编写，该论文发表于ACM CCS 2021。 论文的BibTeX： root@kitploit: @inproceedingsccs2021treqs, title=T-Reqs: HTTP Request Smuggling with Differential Fuzzing, author=Jabiyev, Bahruz and Sprecher,...

headerpwn

headerpwn 一个用于分析服务器对不同HTTP头响应的模糊测试工具。 🏗️ 安装 ⛏️ 使用 📡 通过Burp Suite代理HTTP请求 安装 要安装 headerpwn，请运行以下命令： root@kitploit: go install github.com/devanshbatham/[email protected] 使用 headerpwn 允许你在目标 URL 上测试各种请求头并分析响应。以下是使用该工具的方法： 1. 使用 -url 参数提供目标 URL。 2. 创建一个文件，包含要测试的请求头，每行一个。使用 -headers 参数指定该文件的路径。...

monsoon

monsoon Un rápido enumerador HTTP que te permite ejecutar un gran número de solicitudes HTTP, filtrar las respuestas y mostrarlas en tiempo real monsoon es un fuzzer HTTP rápido y flexible que se puede utilizar para una amplia variedad de acciones, desde descubrimiento de contenido hasta fuerza...

httpfuzz-robomiller

httpfuzz-robomiller Dumb Fuzzer used to find CVE-2010-1411 based on cmiller-csw-2010.pdf Babysitting an Army of Monkeys https://fuzzinginfo.files.wordpress.com/2012/05/cmiller-csw-2010.pdf...

UPDATE: Gloom-Framework v1.7.5

PenTestIT RSS Feed Update time guys! Please refer my initial blog post about this open source penetration testing framework for Kali Linux. I just saw that it has been updated and we now have Gloom-Framework v1.7.5 with new features and a lot of bug fixes. Actually, it was updated quiet a number ...

Acunetix Release Web Site Security Pen Testing Tools Free

HTTP editor, fuzzer and sniffer tools help pen testers identify vulnerabilities London, UK – January 2016 – Hot on the release of Acunetix Version 11, pioneering web application security software Acunetix, now delivering Manual Pen Testing Tools at no cost. Penetration testers can make use of an...