Messy BurpSuite plugin for SQL Truncation vulnerabilities.
☆63Apr 17, 2020Updated 6 years ago
Alternatives and similar repositories for BurpSQLTruncSanner
Users that are interested in BurpSQLTruncSanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Command line tool for testing CRLF injection on a list of domains.☆161Apr 14, 2024Updated 2 years ago
- Extract domains/subdomains/FQDNs from files and URLs☆18Jun 30, 2020Updated 6 years ago
- Burp extension to detect alias traversal via NGINX misconfiguration at scale.☆267Nov 18, 2021Updated 4 years ago
- QUESTER is a Web Pentesting & Bug Bounty Recon tool which queries URLs / Subdomains from the given list of URLs or subdomains.☆15Aug 2, 2021Updated 5 years ago
- Toolkit to detect and keep track on Blind XSS, XXE & SSRF☆342Aug 23, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.☆75Nov 5, 2020Updated 5 years ago
- A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.☆315Jul 9, 2024Updated 2 years ago
- ☆31Apr 6, 2021Updated 5 years ago
- burpsuite 插件对GP所有参数(过滤特殊参数)一键自动添加xss sql payload 进行fuzz☆61Dec 4, 2018Updated 7 years ago
- Subvenkon is a subdomain enumerator from Venkon☆22Jun 22, 2020Updated 6 years ago
- ☆91Sep 2, 2026Updated last month
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆122May 12, 2026Updated 5 months ago
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆160Jul 10, 2025Updated last year
- SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing☆91May 10, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Gathers urls from common crawl☆34Nov 9, 2019Updated 6 years ago
- This little script for gathering chaos.projectdiscovery.io recon data in an organized way and finding the daily differences on it☆18Aug 9, 2020Updated 6 years ago
- Fuzzing for LFI using Burpsuite☆70Oct 4, 2016Updated 10 years ago
- A Payload Injector for bugbounties written in go☆69Jul 18, 2020Updated 6 years ago
- ☆29Mar 18, 2020Updated 6 years ago
- A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser.(Ad…☆42Dec 8, 2022Updated 3 years ago
- ☆17May 3, 2021Updated 5 years ago
- This extension provides a central location for viewing all GraphQL requests/responses within a Burp project. It provides a clean UI that …☆16Feb 24, 2022Updated 4 years ago
- Burp Extension written in Jython to hunt for common vulnerabilities found in websites. Developed by Gaurav Narwani to help people find vu…☆252Apr 27, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- X-Forwarded-For [403 forbidden] enumeration☆101May 3, 2024Updated 2 years ago
- Chromium based web crawler that identifies in-scope urls☆13Jun 4, 2023Updated 3 years ago
- ☆12Apr 21, 2020Updated 6 years ago
- Get all possible href | src | url from target url or domain☆40Aug 5, 2020Updated 6 years ago
- This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path☆109Aug 4, 2020Updated 6 years ago
- A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks☆61Aug 30, 2019Updated 7 years ago
- burpsuite extension for check and extract sensitive request parameter☆117Nov 29, 2020Updated 5 years ago
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆38Dec 2, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.☆39Jan 20, 2023Updated 3 years ago
- Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.☆38Nov 21, 2025Updated 11 months ago
- Automated blind-xss search for Burp Suite☆282Oct 10, 2019Updated 7 years ago
- commonspeak2 subdomains wordlist generated daily **DEPRECATED** The author(s) of commonspeak2 maintain an official repo with more lists. …☆39May 21, 2021Updated 5 years ago
- Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.☆639Mar 18, 2022Updated 4 years ago
- A really simple utility to concate wordlists to a domain name - to pipe into your favourite resolver!☆87Apr 3, 2020Updated 6 years ago
- A sub-domain enumeration tool☆20May 18, 2020Updated 6 years ago