InitRoot / BurpJSLinkFinder

Related projects ⓘ

Alternatives and complementary repositories for BurpJSLinkFinder

• ethicalhackingplayground / ssrf-king
  SSRF plugin for burp Automates SSRF Detection in all of the Request
  ☆555Updated 3 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆527Updated 9 months ago
• synacktiv / HopLa
  HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite
  ☆712Updated 3 years ago
• projectdiscovery / nuclei-burp-plugin
  Nuclei plugin for BurpSuite
  ☆1,193Updated 2 months ago
• TheTwitchy / xxer
  A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.
  ☆511Updated 4 years ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆804Updated 2 years ago
• zricethezav / h1domains
  HackerOne "in scope" domains
  ☆400Updated this week
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆611Updated 9 months ago
• CoreyD97 / BurpCustomizer
  Because just a dark theme wasn't enough!
  ☆552Updated 2 years ago
• nccgroup / AutoRepeater
  Automated HTTP Request Repeating With Burp Suite
  ☆846Updated 2 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆482Updated 10 months ago
• volkandindar / agartha
  A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations,…
  ☆354Updated last month
• stamparm / identYwaf
  Blind WAF identification tool
  ☆616Updated 4 months ago
• nccgroup / LoggerPlusPlus
  Advanced Burp Suite Logging Extension
  ☆630Updated 5 months ago
• hypn0s / AJPy
  ☆465Updated last year
• Bo0oM / WAF-bypass-Cheat-Sheet
  Another way to bypass WAF Cheat Sheet (draft)
  ☆415Updated 5 years ago
• BishopFox / GadgetProbe
  Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.
  ☆585Updated 3 years ago
• pyn3rd / Spring-Boot-Vulnerability
  ☆398Updated 2 years ago
• PortSwigger / autorize
  Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…
  ☆218Updated 2 months ago
• allyshka / Rogue-MySql-Server
  MySQL fake server for read files of connected clients
  ☆584Updated 7 years ago
• PortSwigger / upload-scanner
  HTTP file upload scanner for Burp Proxy
  ☆397Updated last year
• m4ll0k / Atlas
  Quick SQLMap Tamper Suggester
  ☆1,347Updated 2 years ago
• zorox0x / chaospy
  Small Tool written based on chaos from projectdiscovery.io
  ☆167Updated last month
• DiogoMRSilva / websitesVulnerableToSSTI
  Simple websites vulnerable to Server Side Template Injections(SSTI)
  ☆374Updated last year
• artsploit / yaml-payload
  A tiny project for generating SnakeYAML deserialization payloads
  ☆563Updated 5 years ago
• allanlw / svg-cheatsheet
  A cheatsheet for exploiting server-side SVG processors.
  ☆695Updated 4 years ago
• aldaor / HackerOneReports
  Here you can find mostly all disclosed h1 reports
  ☆341Updated 2 years ago
• PortSwigger / js-link-finder
  Burp Extension for a passive scanning JS files for endpoint links.
  ☆162Updated 5 years ago
• irsdl / IIS-ShortName-Scanner
  latest version of scanners for IIS short filename (8.3) disclosure vulnerability
  ☆1,453Updated last year