Alternatives and similar repositories for TInjA

Users that are interested in TInjA are comparing it to the libraries listed below

• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆702Updated last month
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆330Updated 9 months ago
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆325Updated 11 months ago
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆162Updated 10 months ago
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆683Updated last year
• PortSwigger / bambdas
  Bambdas collection for Burp Suite Professional and Community.
  ☆414Updated last week
• devanshbatham / headerpwn
  A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
  ☆351Updated last year
• sysdig / wafer
  ☆214Updated last year
• trufflesecurity / xsshunter
  ☆514Updated 2 weeks ago
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆484Updated this week
• 0x999-x / jsluicepp
  jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
  ☆285Updated last year
• Hackmanit / template-injection-table
  The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.
  ☆100Updated 3 months ago
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆543Updated 11 months ago
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆248Updated 8 months ago
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆297Updated 2 years ago
• redhuntlabs / BucketLoot
  BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…
  ☆433Updated 9 months ago
• edoardottt / pphack
  The Most Advanced Client-Side Prototype Pollution Scanner
  ☆239Updated this week
• az7rb / crt.sh
  Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.
  ☆250Updated last year
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆223Updated last week
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆357Updated 3 years ago
• xnl-h4ck3r / XnlReveal
  A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidde…
  ☆407Updated last week
• midoxnet / mapperplus
  MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.
  ☆281Updated last year
• Escape-Technologies / graphql-wordlist
  The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
  ☆409Updated 2 years ago
• attacksurge / ax
  The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning—On Your Terms. Easily distribute arbit…
  ☆638Updated last month
• sw33tLie / uff
  unleashed ffuf
  ☆224Updated 4 months ago
• g0ldencybersec / CloudRecon
  ☆503Updated last year
• g0ldencybersec / gungnir
  CT Log Scanner
  ☆408Updated 6 months ago
• intrudir / BypassFuzzer
  Fuzz 401/403/404 pages for bypasses
  ☆343Updated 10 months ago
• reewardius / bbFuzzing.txt
  ☆404Updated last month
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆362Updated 3 years ago