🚀 XSSFUZZ - A tool for detecting XSS vulnerabilities in web applications.
☆124Sep 13, 2024Updated last year
Alternatives and similar repositories for xssFuzz
Users that are interested in xssFuzz are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆15Mar 21, 2025Updated last year
- ☆131Aug 19, 2025Updated 7 months ago
- SubOwner - A Simple tool check for subdomain takeovers.☆116Oct 18, 2024Updated last year
- Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real orig…☆171Feb 22, 2026Updated last month
- Self-hosted bug bounty programs that are "scammy" or unethical☆168Feb 10, 2026Updated last month
- Automation tool to testing and confirm the xss vulnerability.☆306Jul 18, 2025Updated 8 months ago
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,535Dec 7, 2025Updated 3 months ago
- The powerfull Extract and Scanner Javascript urls (Upgrade Deeper search)☆21Nov 7, 2024Updated last year
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆83Nov 24, 2025Updated 3 months ago
- Collection of tools, scripts, one-liners, templates, dorks and more☆12Dec 13, 2025Updated 3 months ago
- ☆53Dec 16, 2024Updated last year
- Bypass-Four03 is a powerful bash tool designed to help testers bypass HTTP 403 forbidden errors through various path and header manipulat…☆204May 22, 2025Updated 10 months ago
- Quaithe empowers you to execute multiple commands in parallel for blazing-fast performance.☆28Aug 20, 2023Updated 2 years ago
- ☆29Feb 4, 2026Updated last month
- ☆483Aug 21, 2025Updated 7 months ago
- Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. Th…☆265Jul 6, 2025Updated 8 months ago
- A Python tool for exploiting Django RCE via deserialization vulnerabilities in session cookies, allowing remote code execution through fo…☆19Nov 21, 2025Updated 4 months ago
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆44Feb 24, 2025Updated last year
- Script to automate bypassing 403 forbidden status code☆24Jun 18, 2025Updated 9 months ago
- crawler for finding reflected parameters and reflecting special characters!☆21Dec 2, 2024Updated last year
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,580Jun 6, 2022Updated 3 years ago
- A powerful asynchronous XSS scanner supporting up to 1,500 concurrent requests.☆167Aug 16, 2024Updated last year
- my nuclei templates☆41Apr 21, 2024Updated last year
- ☆39May 4, 2025Updated 10 months ago
- AI-powered ffuf wrapper☆651Dec 4, 2025Updated 3 months ago
- ☆65Jul 6, 2023Updated 2 years ago
- A modern tool written in Python that automates your xss findings.☆470Nov 26, 2023Updated 2 years ago
- CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow☆26Jul 13, 2024Updated last year
- ☆197Jun 11, 2024Updated last year
- ex-param is an automated tool designed for finding reflected parameters for XSS vulnerabilities. It crawls a target website, extracts GET…☆63Feb 22, 2025Updated last year
- ☆544Jun 26, 2024Updated last year
- ☆185Mar 14, 2026Updated last week
- Backup Files Wordlist Generator - generate a comprehensive list of potential backup file Wordlist based on a given list URL and backup fi…☆89Jun 23, 2025Updated 9 months ago
- Automate Recon XSS Bug Bounty☆179Mar 9, 2026Updated 2 weeks ago
- ☆17Sep 15, 2023Updated 2 years ago
- SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.☆191Mar 18, 2025Updated last year
- An automated bug hunting tool for comprehensive reconnaissance, including subdomain enumeration, port scanning, vulnerability detection, …☆13Jun 24, 2025Updated 8 months ago
- Url scrapper or extractor from alienvault☆38Mar 1, 2025Updated last year
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆936Aug 24, 2023Updated 2 years ago