Popular repositories Loading

1. Web-Attack-Cheat-Sheet Web-Attack-Cheat-Sheet Public

   Web Attack Cheat Sheet

   4.2k 642

2. hsecscan hsecscan Public

   A security scanner for HTTP response headers.

   Python 294 77

3. h2rs h2rs Public

   Detects request smuggling via HTTP/2 downgrades.

   Python 92 10

4. pubkey-pin-android pubkey-pin-android Public

   Just another example for Android Public Key Pinning (based on OWASP example)

   Java 37 12

5. h2csmuggler-proxy h2csmuggler-proxy Public

   This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.

   Python 37 4

6. DesyncCL0 DesyncCL0 Public

   A simple tool to detect vulnerabilities described here https://portswigger.net/research/browser-powered-desync-attacks.

   Python 36 10