Alternatives and similar repositories for TInjA

Users that are interested in TInjA are comparing it to the libraries listed below

• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆711Updated last month
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆380Updated last year
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆330Updated last year
• devanshbatham / headerpwn
  A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
  ☆353Updated 2 years ago
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆421Updated this week
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆744Updated 2 years ago
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆163Updated last year
• trufflesecurity / xsshunter
  ☆531Updated last month
• PortSwigger / bambdas
  Bambdas collection for Burp Suite Professional and Community.
  ☆474Updated last week
• sysdig / wafer
  ☆220Updated last year
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆233Updated this week
• edoardottt / pphack
  The Most Advanced Client-Side Prototype Pollution Scanner
  ☆243Updated last week
• Hackmanit / template-injection-table
  The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.
  ☆103Updated 5 months ago
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆255Updated 11 months ago
• attacksurge / ax
  The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…
  ☆700Updated 3 weeks ago
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆499Updated 2 weeks ago
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆636Updated last month
• Moopinger / smugglefuzz
  A rapid HTTP downgrade smuggling scanner written in Go.
  ☆310Updated last year
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆453Updated 3 years ago
• 0x999-x / jsluicepp
  jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
  ☆288Updated last year
• sw33tLie / uff
  unleashed ffuf
  ☆233Updated 2 months ago
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆363Updated 4 years ago
• g0ldencybersec / CloudRecon
  ☆518Updated last year
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆360Updated 3 years ago
• midoxnet / mapperplus
  MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.
  ☆284Updated last year
• waf-bypass-maker / waf-community-bypasses
  ☆544Updated last year
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆299Updated 2 years ago
• hisxo / JSpector
  A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues
  ☆372Updated 2 years ago
• g0ldencybersec / gungnir
  CT Log Scanner
  ☆499Updated 3 weeks ago
• Escape-Technologies / graphql-wordlist
  The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
  ☆455Updated 2 years ago