A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing
☆142Jun 27, 2023Updated 3 years ago
Alternatives and similar repositories for ParaForge
Users that are interested in ParaForge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Burp Suite extension for finding DNS vulnerabilities in web applications!☆91Sep 12, 2023Updated 2 years ago
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆125Apr 10, 2024Updated 2 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆377Jul 25, 2023Updated 3 years ago
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆97Jan 2, 2025Updated last year
- 「🔑」A tool used to hunt down API key leaks in JS files and pages☆937Mar 12, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Script to read input from stdin and encode it☆19Aug 23, 2023Updated 2 years ago
- A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidde…☆452Apr 24, 2026Updated 3 months ago
- ☆12May 31, 2023Updated 3 years ago
- Tool for collect subdomains from different websites but the unique in tool collect subdomains from subdomainfinder.c99 and collect all su…☆26Feb 5, 2023Updated 3 years ago
- Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite☆82Jan 13, 2023Updated 3 years ago
- LogSnare: A playground for testing, preventing, and logging IDOR vulnerabilities.☆34Mar 4, 2024Updated 2 years ago
- Generate tens of thousands of subdomain combinations in a matter of seconds☆276Sep 25, 2023Updated 2 years ago
- Bug bounty API dashboard aggregating data from HackerOne, Bugcrowd and other platforms☆42Aug 13, 2023Updated 3 years ago
- jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice☆302Apr 9, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆280Sep 11, 2025Updated 11 months ago
- Process URLs and remove duplicate query parameters.☆27Mar 19, 2024Updated 2 years ago
- A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon☆247Oct 20, 2023Updated 2 years ago
- Community curated list of nuclei templates for finding "unknown" security vulnerabilities.☆107May 2, 2024Updated 2 years ago
- Discover hidden debugging parameters and uncover web application secrets☆248Feb 4, 2026Updated 6 months ago
- Nodesub is a command-line tool for finding subdomains in bug bounty programs☆149Aug 1, 2024Updated 2 years ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆757Jul 10, 2026Updated last month
- A path-normalization pentesting tool.☆154Apr 2, 2026Updated 4 months ago
- moniorg is a tool that leverages crt.sh website to monitor domains of a target☆48Apr 1, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆387May 19, 2023Updated 3 years ago
- Repo for hosting rayder workflows☆65Aug 31, 2023Updated 2 years ago
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆907May 3, 2023Updated 3 years ago
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆91Feb 3, 2024Updated 2 years ago
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 5 months ago
- Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.☆257Feb 10, 2025Updated last year
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,529Jan 8, 2026Updated 7 months ago
- Xss payload for bypassing waf☆19Apr 18, 2020Updated 6 years ago
- This repository stores some of my custom BCheck Scan configurations. Its goal is to identify intriguing elements that warrant further man…☆105Feb 9, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆384May 17, 2023Updated 3 years ago
- This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.☆248Mar 17, 2025Updated last year
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,863Apr 17, 2026Updated 4 months ago
- An IIS short filename enumeration tool☆1,215Nov 25, 2024Updated last year
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,891May 22, 2024Updated 2 years ago
- This script reads a text file containing domains, fetches the subdomains from crt.sh☆11May 31, 2023Updated 3 years ago
- The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.☆483Oct 3, 2023Updated 2 years ago