Alternatives and similar repositories for nosqli

Users that are interested in nosqli are comparing it to the libraries listed below

• kleiton0x00 / ppmap
  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
  ☆513Updated 3 years ago
• barrracud4 / image-upload-exploits
  This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…
  ☆342Updated 4 years ago
• BishopFox / h2csmuggler
  HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
  ☆756Updated 3 years ago
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆362Updated 3 years ago
• msrkp / PPScan
  Client Side Prototype Pollution Scanner
  ☆520Updated 3 years ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆494Updated 3 years ago
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆372Updated 2 years ago
• neex / http2smugl
  ☆555Updated 6 months ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆905Updated 3 years ago
• mazen160 / jwt-pwn
  Security Testing Scripts for JWT
  ☆318Updated 3 years ago
• anshumanpattnaik / http-request-smuggling
  HTTP Request Smuggling Detection Tool
  ☆524Updated last year
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆321Updated 2 months ago
• honoki / bbrf-client
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆633Updated 2 months ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆640Updated last year
• dwisiswant0 / ppfuzz
  A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀
  ☆640Updated last month
• Sh1Yo / request_smuggler
  Http request smuggling vulnerability scanner
  ☆229Updated 3 years ago
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆803Updated 2 months ago
• geeknik / the-nuclei-templates
  Nuclei templates written by geeknik. Claude is my co-pilot. 🤖
  ☆277Updated last month
• BitTheByte / Monitorizer
  Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools
  ☆279Updated last year
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆675Updated last year
• jaeles-project / jaeles-signatures
  Default signature for Jaeles Scanner
  ☆324Updated 3 years ago
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆437Updated 2 years ago
• fcavallarin / domdig
  DOM XSS scanner for Single Page Applications
  ☆415Updated last week
• bp0lr / gauplus
  ☆295Updated 3 years ago
• mhmdiaa / second-order
  Second-order subdomain takeover scanner
  ☆408Updated last month
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆650Updated last year
• 0ang3el / websocket-smuggle
  Issues with WebSocket reverse proxying allowing to smuggle HTTP requests
  ☆375Updated last year
• wdahlenburg / interactsh-collaborator
  Burpsuite plugin for Interact.sh
  ☆227Updated last year
• PortSwigger / ip-rotate
  Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
  ☆264Updated 3 weeks ago
• M4DM0e / DirDar
  DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it
  ☆453Updated last year