Pinned

1. CVE-2023-25690-POC CVE-2023-25690-POC Public

   CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

   Dockerfile 251 35

2. HTTP3ONSTEROIDS HTTP3ONSTEROIDS Public

   HTTP3ONSTEROIDS - A research on CVE-2023-25950 where HAProxy's HTTP/3 implementation fails to block a malformed HTTP header field name.

   C 10 2

3. Network-Intrusion-Detection-Model Network-Intrusion-Detection-Model Public

   This repository contains all necessary files for implementation of the Intrusion Detection System model. This project is for educational purposes only and is implemented for decision support system…

   Jupyter Notebook 4

4. simple-http-smuggler-generator simple-http-smuggler-generator Public

   This tool is developed for burp suite practitioner certificate exam and HTTP Request Smuggling labs. The most important about this tool is TE.CL vulnerability exploitation and chunk size auto gener…

   Python 13 2

5. BSCP攻略チートシート BSCP攻略チートシート

   1

   ## 試験ルール

   2

   - 制限時間は4時間

   3

   - 2つの脆弱なアプリケーションを攻略する

   4

   - それぞれのアプリケーションでの流れは以下の通り

   5

     - ステージ1: 任意のユーザー アカウントを奪う。

6. DNSEXFIL DNSEXFIL Public

   OOB Data Exfiltration via DNS

   6