IFGHou / Grendel-ScanLinks
A tool for automated security scanning of web applications. Many features are also present for manual penetration testing.
☆30Updated 11 years ago
Alternatives and similar repositories for Grendel-Scan
Users that are interested in Grendel-Scan are comparing it to the libraries listed below
Sorting:
- XSS Hunter Burp Plugin☆152Updated 7 years ago
- Burp Suite Importer - Connect to multiple web servers while populating the sitemap.☆47Updated 5 years ago
- Local File Inclusion Exploitation Tool (mirror)☆128Updated 8 years ago
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆158Updated 7 months ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆116Updated 6 years ago
- A simple framework for sending test payloads for known web CVEs.☆133Updated 5 years ago
- Python code to query the Censys public scan database.☆153Updated 4 years ago
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆139Updated 4 years ago
- A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.☆98Updated 7 years ago
- A Burp Extension designed to identify argument injection vulnerabilities.☆122Updated 6 years ago
- XSS Payloads☆49Updated 10 years ago
- A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.☆152Updated last year
- Preventing malicious takeover of the retired slurp AWS tool☆41Updated 7 years ago
- Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdom…☆102Updated 2 years ago
- Powerful Visual Subdomain Enumeration at the Click of a Mouse☆137Updated 6 years ago
- Advanced web server fingerprinting for Nmap☆129Updated 8 years ago
- Nmap custom probes for better detecting SAP services☆142Updated last year
- subdomain bruteforce list☆102Updated last year
- A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys☆153Updated 3 years ago
- Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.☆206Updated last year
- Burp Suite extension to discover assets from HTTP response.☆231Updated last year
- Pillage a git repo found in an accessible web root☆61Updated 14 years ago
- A collection of scripts to extend Burp Suite☆142Updated 6 years ago
- Asynchronous wordlist based DKIM scanner☆58Updated 4 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆110Updated 2 years ago
- NodeXP - A Server Side Javascript Injection tool capable of detecting and exploiting Node.js vulnerabilities☆108Updated last year
- A lab for playing with NoSQL Injection☆134Updated 5 years ago
- A Report Generation Tool for Security Assessment☆65Updated 7 years ago
- A tool to hunt for publicly accessible DigitalOcean Spaces☆156Updated 6 years ago
- A tool that can take a URL or list of URL and prints back SAML consume URL.☆36Updated 7 years ago