How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
A script that inspects multi-byte character sets looking for characters with specific user-defined properties
The main features of hack-all-the-things/charsetinspect are: Fuzzing and Injection.
Projects with overlapping indexed features include: 0xinfection/xsrfprobe — The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit. aleff-github/wayparam — Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider). bo0om/fuzz.txt — Potentially dangerous files. commixproject/commix — Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It… epinna/tplmap — tplmap is a security tool designed for the detection and exploitation of server-side template injection… fuzzdb-project/fuzzdb — fuzzdb is a collection of datasets designed for web application penetration testing and dynamic fuzzing. It provides a…
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
Commix is an automated tool for detecting and exploiting OS command injection vulnerabilities in web applications. It probes user-supplied input vectors with heuristic test payloads, analyzes response differences to identify injection points, and then automates the execution of arbitrary operating system commands on the target server. The tool distinguishes itself through a multi-layer filter bypass engine that evaluates input constraints independently per filter type and composes tailored evasion strategies into a single payload. A modular payload tamper pipeline transforms raw injection str
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
