HTTPLoot is a automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the…
Whatweb is the perfect name for this tool. Simply it answers the question, “What is that Website?” Whatweb can identify…
Forbidden is to Bypass 4xx HTTP response status codes. Based on PycURL. Script uses multithreading, and is based on brute forcing…
Pathprober is a Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at…
SharpWebServer is a Red Team oriented simple HTTP & WebDAV server written in C# with functionality to capture Net-NTLM hashes. To be…
HTTP_Bridge is a tool used for compouned of two parts, the server and a client. Server The server is just…
h2cSmuggler smuggles HTTP traffic past insecure edge-server proxy_pass configurations by establishing HTTP/2 cleartext (h2c) communications with h2c-compatible back-end servers, allowing…
Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which communicates with…
httpgrep is a python tool which scans for HTTP servers and finds given strings in HTTP body and HTTP response…
FProbe is a took to take list of domains/subdomains and probe for working http/https server. Installation GO111MODULE=on go get -u…