Embeddable and Secure PHP Authentication System with Login, Signup, User Profiles, Profile Editing, Account Verification via Email, Password Reset System, Remember-Me Feature and more.

Customisable and automated HTTP header injection

Security testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.

NexusBrute: A modular Node.js toolkit for ethical security testing. Features Smart Brute, API Fuzzer, Session Logger, and more ... Use responsibly! 🌌

This script identifies Host Header Injection vulnerabilities in a list of URLs or a specific domain, outputting the vulnerable locations along with the specific headers causing the vulnerability

HHunter is a specialized security testing tool designed to detect vulnerabilities through HTTP header manipulation and analysis. Built for penetration testers, bug bounty hunters, and security professionals, it delivers enterprise-grade detection capabilities for header-based attacks with intelligent differential analysis.

🐶 A curated list of Web Security materials and resources.

Simple Envoy Service Mesh with External Authorization and Custom Header Injection.

©️ A Webpack plugin for injecting comment header (like version or copyright) to html, js and css files

CRLF/Header Injection reconnaissance pipeline for Bug Bounty and Pentest workflows

Chrome extension for injecting auth headers into requests. Built with SDK Kit.