Toolset for detecting reflected xss in websites
☆114Oct 7, 2018Updated 8 years ago
Alternatives and similar repositories for xssfinder
Users that are interested in xssfinder are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆248Jun 6, 2018Updated 8 years ago
- A better version of my xssfinder tool - scans for different types of xss on a list of urls.☆188Aug 3, 2019Updated 7 years ago
- A better dns bruteforcer written in golang☆13Nov 4, 2018Updated 8 years ago
- a .js scanner, built in php. designed to scrape urls and other info☆228Aug 22, 2017Updated 9 years ago
- bountytpl – template generator cli. By using a template similar to the ones for Template Generator (https://github.com/fransr/template-ge…☆48Aug 5, 2019Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Simple multi threaded tool to extract domain related data from commoncrawl.org☆30Jul 17, 2018Updated 8 years ago
- A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!☆87Apr 3, 2020Updated 6 years ago
- Generates permutations, alterations and mutations of subdomains. Auto Resolve what we find.☆11Dec 8, 2020Updated 5 years ago
- A tool for fetching archived URLs (to be rewritten in Go).☆42Jul 19, 2018Updated 8 years ago
- Automatic tool for DNS rebinding-based SSRF attacks☆308Aug 21, 2020Updated 6 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆26Dec 12, 2018Updated 7 years ago
- ☆31Apr 6, 2021Updated 5 years ago
- This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping☆48Nov 12, 2019Updated 6 years ago
- Scans crossdomain.xml policies for expired domain names.☆26Aug 4, 2015Updated 11 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack☆41Dec 23, 2022Updated 3 years ago
- Of the thousands of lazy reconnaissance scripts, this one is by far the one in this repository.☆11Oct 21, 2026Updated 2 weeks ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆62Apr 17, 2020Updated 6 years ago
- A project to track ideas needed by the infosec community.☆11Dec 5, 2017Updated 8 years ago
- Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common m…☆76Mar 22, 2024Updated 2 years ago
- secretz, minimizing the large attack surface of Travis CI☆325May 30, 2022Updated 4 years ago
- Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.☆67Apr 25, 2025Updated last year
- A mini webserver with FTP support for XXE payloads☆344Jan 3, 2024Updated 2 years ago
- WebDigger is a python based tool, specially created to get a company's unknown domain for pentestor.☆17Aug 6, 2016Updated 10 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The Serverless Blind XSS App☆338Mar 28, 2026Updated 7 months ago
- Extract subdomains from SSL certificates in HTTPS sites.☆391Sep 1, 2026Updated 2 months ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- A permutation generation tool written in golang☆213Jul 15, 2019Updated 7 years ago
- Burp plugin able to find reflected XSS on page in real-time while browsing on site☆1,218Feb 2, 2021Updated 5 years ago
- A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques☆743May 4, 2019Updated 7 years ago
- Enumerate subdomains by parsing Rapid7 FDNS dumps and CA transparency logs☆27Apr 26, 2019Updated 7 years ago
- A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…☆97Jun 5, 2021Updated 5 years ago
- Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.☆205Feb 15, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.☆318May 22, 2023Updated 3 years ago
- A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)☆691Jan 28, 2024Updated 2 years ago
- Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.☆639Mar 18, 2022Updated 4 years ago
- Bug Bounty statistics tool.☆34Nov 17, 2022Updated 3 years ago
- Print out URL schemas from an Android app☆133Feb 9, 2025Updated last year
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 8 years ago
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆28Oct 18, 2021Updated 5 years ago