a Go code to detect leaks in JS files via regex patterns
☆151Oct 20, 2021Updated 5 years ago
Alternatives and similar repositories for jsleak
Users that are interested in jsleak are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Js File Scanner☆11Mar 30, 2021Updated 5 years ago
- gup aka Get All Urls parameters to create wordlists for brute forcing parameters.☆18Dec 4, 2021Updated 4 years ago
- ☆298Jul 16, 2022Updated 4 years ago
- KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…☆58Sep 6, 2021Updated 5 years ago
- Detects request smuggling via HTTP/2 downgrades.☆94Jul 30, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for m…☆13Feb 1, 2022Updated 4 years ago
- A collection of scripts for bug-bounty related stuff☆38Sep 4, 2020Updated 6 years ago
- A simple tool which makes creating nuclei templates even easier.☆36Jun 23, 2024Updated 2 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 5 years ago
- This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.☆60May 30, 2023Updated 3 years ago
- A simple tool that aims to efficiently and quickly parse the outputs of web scraping tools like gau☆12Jun 28, 2021Updated 5 years ago
- Easily schedule commands to run multiple times at set intervals (like a cronjob, but with one command)☆85Apr 5, 2021Updated 5 years ago
- Get all the CNs from a list of domains☆46Aug 17, 2021Updated 5 years ago
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆98Jan 21, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Signatures for jaeles scanner by @j3ssie☆115Apr 20, 2024Updated 2 years ago
- XSS Finder Via SSTI☆59Sep 14, 2023Updated 3 years ago
- JSNotify is a Python script designed to monitor JavaScript files in a specified directory for changes. This tool can be used by developer…☆18May 30, 2026Updated 5 months ago
- A recon Framework for Bug Bounty Hunters that would convert the output of a script into Markdown syntax document, which would help them t…☆12Sep 21, 2021Updated 5 years ago
- HTTP fuzzer engine security oriented☆61Oct 25, 2026Updated last week
- Writeup for HackerOne H1-415 2020 CTF☆32Feb 3, 2020Updated 6 years ago
- Feed it a list of subdomains, it will resolve them and tell you which ones are internal☆92Nov 21, 2021Updated 4 years ago
- Tool for checking reflecting Parameters in a URL.☆10Aug 31, 2020Updated 6 years ago
- ☆563Mar 27, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Magic Header Blind Xss tool (deliver blind xss payloads in request headers).☆25May 30, 2021Updated 5 years ago
- ☆36Aug 27, 2022Updated 4 years ago
- Hidden parameters discovery suite☆2,097Sep 8, 2024Updated 2 years ago
- Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pag…☆530Jul 3, 2026Updated 3 months ago
- Go scripts for checking API key / access token validity☆224Aug 3, 2021Updated 5 years ago
- Get related domains / subdomains by looking at Google Analytics IDs☆252Jun 3, 2022Updated 4 years ago
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆183Nov 22, 2021Updated 4 years ago
- Fetches javascript file from a list of URLS or subdomains.☆866Jul 22, 2025Updated last year
- ☆96Oct 1, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Nuclei Templates - Here you will find the templates I use while hunting☆119Aug 2, 2026Updated 3 months ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆95Jul 9, 2025Updated last year
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,460Sep 13, 2024Updated 2 years ago
- vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.☆332Mar 27, 2024Updated 2 years ago
- goverview - Get an overview of the list of URLs☆143Dec 5, 2025Updated 10 months ago
- Easily gather all routes related to a NextJs application through parsing of _buildManifest.js☆67Dec 12, 2022Updated 3 years ago
- HTTP Request Smuggling Detection Tool☆549Dec 21, 2023Updated 2 years ago