{"id":13636668,"url":"https://github.com/nccgroup/BurpSuiteHTTPSmuggler","last_synced_at":"2025-04-19T08:32:52.549Z","repository":{"id":43921669,"uuid":"139547281","full_name":"nccgroup/BurpSuiteHTTPSmuggler","owner":"nccgroup","description":"A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques","archived":false,"fork":false,"pushed_at":"2019-05-04T06:15:42.000Z","size":2731,"stargazers_count":683,"open_issues_count":1,"forks_count":110,"subscribers_count":28,"default_branch":"master","last_synced_at":"2024-04-14T21:07:37.250Z","etag":null,"topics":["burpsuite","burpsuite-extender","bypass","waf"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/nccgroup.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-07-03T07:47:58.000Z","updated_at":"2024-04-09T06:23:13.000Z","dependencies_parsed_at":"2022-07-11T00:16:23.678Z","dependency_job_id":null,"html_url":"https://github.com/nccgroup/BurpSuiteHTTPSmuggler","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nccgroup%2FBurpSuiteHTTPSmuggler","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nccgroup%2FBurpSuiteHTTPSmuggler/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nccgroup%2FBurpSuiteHTTPSmuggler/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/nccgroup%2FBurpSuiteHTTPSmuggler/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/nccgroup","download_url":"https://codeload.github.com/nccgroup/BurpSuiteHTTPSmuggler/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":223795250,"owners_count":17204136,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["burpsuite","burpsuite-extender","bypass","waf"],"created_at":"2024-08-02T00:01:03.884Z","updated_at":"2024-11-09T06:30:44.015Z","avatar_url":"https://github.com/nccgroup.png","language":"Java","funding_links":[],"categories":["Web Application Firewall Evasion","Weapons","Java","Java (504)"],"sub_categories":["Template Injection","Burpsuite, Caido and ZAP Addons","SSRF"],"readme":"# Burp Suite HTTP Smuggler\nA Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques. \nThis extension has been developed by Soroush Dalili (@irsdl) from NCC Group.\n\nThe initial release (v0.1) only supports the Encoding capability that can be quite complicated to be performed manually. \nSee the references for more details.\n\nNext versions will include more techniques and possible bug fixes.\n# Example Screenshots\n![AppSec EU 18 - example1](screenshots/AppSecEU18-example1.jpg?raw=true \"AppSec EU 18 - example1\")\n\n![AppSec EU 18 - example2](screenshots/AppSecEU18-example2.jpg?raw=true \"AppSec EU 18 - example2\")\n\n\n# References:\n* https://appseceurope2018a.sched.com/event/EgXc/waf-bypass-techniques-using-http-standard-and-web-servers-behavior\n* https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2017/august/request-encoding-to-bypass-web-application-firewalls/\n* https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2017/september/rare-aspnet-request-validation-bypass-using-request-encoding/\n\nReleased under AGPL v3.0 see LICENSE for more information\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnccgroup%2FBurpSuiteHTTPSmuggler","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fnccgroup%2FBurpSuiteHTTPSmuggler","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fnccgroup%2FBurpSuiteHTTPSmuggler/lists"}