Skip to content
View dhmosfunk's full-sized avatar
☕
enjoying freddo espresso!
☕
enjoying freddo espresso!
72 followers · 26 following

Achievements

Achievement: Starstruckx2Achievement: Pull Shark

Achievements

Achievement: Starstruckx2Achievement: Pull Shark

Block or report dhmosfunk

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Please don't include any personal information such as legal names or email addresses. Maximum 100 characters, markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
dhmosfunk/README.md

@dhmosfunk
@https://app.hackthebox.com/profile/78776

Pull Requests:

Repository Topic Pull Request
swisskyrepo/PayloadsAllTheThings SQL Injection Update the PostgreSQL Time Based Payloads for Database,Table,Columns Extract
swisskyrepo/PayloadsAllTheThings HTTP Request Smuggling Add my tool for manually HTTP Request Smuggling exploitation

Research

Pinned Loading

  1. CVE-2023-25690-POC CVE-2023-25690-POC Public

    CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

    Dockerfile 275 38

  2. HTTP3ONSTEROIDS HTTP3ONSTEROIDS Public

    HTTP3ONSTEROIDS - A research on CVE-2023-25950 where HAProxy's HTTP/3 implementation fails to block a malformed HTTP header field name.

    C 10 2

  3. LatrodectusWEB LatrodectusWEB Public

    ArachnoAnalysis: Spinning Webs with Latrodectus - A Novice's Dive into Malware Mysteries.

    JavaScript

  4. simple-http-smuggler-generator simple-http-smuggler-generator Public

    This tool is developed for burp suite practitioner certificate exam and HTTP Request Smuggling labs. The most important about this tool is TE.CL vulnerability exploitation and chunk size auto gener…

    Python 16 2

  5. DNSEXFIL DNSEXFIL Public

    OOB Data Exfiltration via DNS

    8