RustedRace A GUI-based race condition vulnerability testing tool built in Rust. RustedRace allows security researchers and developers to explore and test for race condition vulnerabilities in web applications through two main testing modes: Replay Race and Workflow Race.
- Replay Race: Test simple race conditions with HTTP request replay
- Workflow Race: Test complex multi-request scenarios
- Multiple Execution Modes: Burst, Wave, and Random timing
- Wordlist Support: Load custom wordlists for parameter fuzzing
- Burp Suite Integration: Parse raw HTTP requests directly
- Real-time Results: Live monitoring of responses and timing
- Rust 1.70+
git clone https://github.com/gurudattch/RustedRace
cd RustedRace
cargo build --release
./target/release/rustedracechmod +x launch.sh
./launch.sh- Launch the application
- Choose mode: Replay Race or Workflow Race
- Paste HTTP request from Burp Suite or write manually
- Set concurrency (number of parallel requests)
- Click "Start Race" and monitor results
- Launch the tool
- Paste Request from burp
- Edit configuration according to your use case
- Click on Parse the request
- Start Race Attack Analyze response report in sidebar
Tip: For better Result make number of Threads & Total Requests equal
Replay Race:
Workflow Race:
- Load text files with one value per line
- Use
{{UNIQUE}}placeholder in requests - Values get substituted automatically
- Burst: All requests at once
- Wave: Requests in timed batches
- Random: Randomized timing
- Thread Count: 1-1000 concurrent requests
Only test applications you own or have permission to test. This tool is for legitimate security research only.