Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
☆161Mar 13, 2025Updated 11 months ago
Alternatives and similar repositories for ParamSpider
Users that are interested in ParamSpider are comparing it to the libraries listed below
Sorting:
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,823Aug 20, 2025Updated 6 months ago
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆17Oct 30, 2025Updated 4 months ago
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated last year
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆89May 2, 2024Updated last year
- NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications☆341Mar 26, 2025Updated 11 months ago
- This a adaption of tomnomnom's kxss tool with a different output format☆516Sep 27, 2023Updated 2 years ago
- bounty collection☆41Sep 1, 2024Updated last year
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆37Jul 27, 2025Updated 7 months ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Dec 13, 2025Updated 2 months ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆3,010Jun 24, 2024Updated last year
- Passively check for XSS character encodings☆18Feb 7, 2026Updated 3 weeks ago
- ☆29May 22, 2024Updated last year
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 2 years ago
- This repository has workflows created for https://github.com/RikunjSindhwad/Task-Ninja☆24Aug 14, 2025Updated 6 months ago
- JScripter is a Python script designed to scrape and save unique JavaScript files from a list of URLs or a single URL.☆29Nov 26, 2024Updated last year
- A collection of Bug Bounty Tips collected from GitHub to all bug bounty hunters☆29Dec 12, 2023Updated 2 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆19Sep 29, 2022Updated 3 years ago
- Bug Hunting Handbook☆11Aug 11, 2022Updated 3 years ago
- 一个以fuzz为中心思想的被动扫描工具☆161Dec 26, 2023Updated 2 years ago
- Template Nuclei SSTI☆34Nov 18, 2025Updated 3 months ago
- Fast and customizable subdomain wordlist generator using DSL☆928Feb 5, 2026Updated 3 weeks ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆4,837Jan 1, 2025Updated last year
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆34Aug 21, 2024Updated last year
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,771May 22, 2024Updated last year
- A wrapper around grep, to help you grep for things☆2,078Jun 8, 2024Updated last year
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆311Mar 31, 2024Updated last year
- Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist☆416Aug 25, 2024Updated last year
- ☆44Jun 28, 2025Updated 8 months ago
- Ultimate Wordlist for Web Content Discovery☆68Apr 28, 2025Updated 10 months ago
- An IIS short filename enumeration tool☆1,123Nov 25, 2024Updated last year
- ARL 灯塔的 WIH 利用☆32Jul 2, 2024Updated last year
- This is a python wrapper around the amazing KNOXSS API by Brute Logic☆280Jan 12, 2026Updated last month
- A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing☆142Jun 27, 2023Updated 2 years ago
- ☆12Jan 30, 2025Updated last year
- Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite o…☆614Jul 5, 2024Updated last year
- 对任意http网站添加指定漏洞 目前实现部分漏洞的追加 支持本身http服务 支持反向代理追加☆28Oct 8, 2022Updated 3 years ago
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆3,925Oct 4, 2025Updated 4 months ago
- Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations☆394Jun 17, 2020Updated 5 years ago
- declutters url lists for crawling/pentesting☆1,531Feb 23, 2025Updated last year