undetected-httpx

undetected-httpx undetected-httpx is a multi-purpose HTTP probing toolkit inspired by httpx. It is specifically engineered to bypass modern anti-bot infrastructures by mimicking real-world browser signatures. Traditional HTTP clients are easily fingerprinted and blocked by WAFs. This tool leverag...

CVE-2020-13942

CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...

EagleEye

EagleEye: With the addition of the -ss option in HTTPX by Project Discovery, it is now possible to create a list of potentially vulnerable URLs with gf xss and qsreplace with the XSS payload, such as alerthacked. HTTPX will then visit all the URLs and take screenshots of them, which are stored in...

unfurl

unfurl Pull out bits of URLs provided on stdin Install If you have Go installed and configured: ▶ go install github.com/tomnomnom/unfurl@latest Otherwise download the latest binary for your platform, extract it and move it to somewhere in your $PATH e.g. /usr/bin/: ▶ wget...

httpx-action

httpx Action makes it easy to orchestrate httpx with GitHub Action. Example Usage GitHub Action running httpx on list of hosts - name: 💥 httpx - HTTP Web Server probing uses: projectdiscovery/httpx-action@main with: list: hosts.txt Example workflow : .github/workflows/httpx.yml name: 💥 httpx - HT...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

httpx

機能 • インストール • 使用方法 • ドキュメント • 注意事項 • Discordに参加 httpx は、retryablehttp ライブラリを使用して複数のプローブを実行できる、高速で多目的なHTTPツールキットです。スレッド数を増やしても結果の信頼性を維持するように設計されています。 機能 シンプルでモジュール化されたコードベースにより、コントリビュートが容易。 高速かつ完全に設定可能なフラグで、複数の要素をプローブ可能。 複数のHTTPベースのプロービングをサポート。 デフォルトでHTTPSからHTTPへのスマートな自動フォールバック。...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

Oneliner-Bugbounty

Oneliner-Bugbounty A collection oneliner scripts for bug bounty List tools Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro Auto scanner subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates Finding files For example in here .js...

CVE-2020-13942

CVE-2020-13942 在使用脚本之前，先对目标运行 httpx 或 httprob。 用法 ./CVE-2020-13942.sh target.txt 致谢 本脚本基于 Rohit Gautam 的仓库制作。...

CVE-2019-9053

CVE-2019-9053 Original post can be found here Tested on Python 3.11 I don't take any responsibility for missuse or unauthorized use of this script. Check out the blog post for more information about this script Requirements pip3 install httpx...

CVE-2023-23752

CVE-2023-23752 simple bash script for CVE-2023-23752 joomla CMS You can use the -u option to specify a single URL or the -l option to provide a file containing a list of URLs to test the vulnerable endpoint. This script saves all HTTP response data and displays sensitive information. dependancy:...

httpx

httpx This is a Mythic C2 Profile called httpx. This is a community request C2 Profile for Mythic that provides a more dynamic and configurable HTTP profile. This profile offers the following features: Callback Domains array of values Domain Rotation fail-over and round-robin Domain Fallback...

recon-ninja

recon-ninja The tool is a GitHub repository that provides a recon tool that lets you upload your domain discovery through an upload option. The tool utilizes HTTPX, which is a tool that scans for alive domains. The tool also has an integrated MongoDB Atlas database, which is a cloud-based databas...

CVE-2023-21887

CVE-2023-21887 エクスプロイト このスクリプトは、URLのリストをスキャンしてCVE-2023-46805の脆弱性を検出し、それを悪用します 使用方法 1. 必要な依存関係をインストール: pip install httpx...

CVE-2025-24893_Shell

2025-24893Shell requirements: httpx use: python exploit.py victim.com...

EUVD-2026-80073

A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.get of the file agentsdks/python/a2uiagent/src/a2ui/extensions/fileresolve/fileresolver.py of the component FileResolver. The manipulation leads to server-side request forgery. I...

CVE-2026-54549

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the uploadadimage tool in metaadsmcp/core/ads.py passes an attacker-controlled imageurl to trymultipledownloadmethods in metaadsmcp/core/utils.py, where httpx.AsyncClient uses...

EUVD-2026-78887

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the uploadadimage tool in metaadsmcp/core/ads.py passes an attacker-controlled imageurl to trymultipledownloadmethods in metaadsmcp/core/utils.py, where httpx.AsyncClient uses...

CVE-2026-54549 Meta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch

Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, the uploadadimage tool in metaadsmcp/core/ads.py passes an attacker-controlled imageurl to trymultipledownloadmethods in metaadsmcp/core/utils.py, where httpx.AsyncClient uses...