Alternatives and similar repositories for brainstorm:

Users that are interested in brainstorm are comparing it to the libraries listed below

• ngalongc / AuthzAI
  ☆173Updated 6 months ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆349Updated 4 months ago
• 0x999-x / jsluicepp
  jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
  ☆272Updated last year
• AethliosIK / reset-tolkien
  Unsecure time-based secret exploitation and Sandwich attack implementation Resources
  ☆134Updated 4 months ago
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆156Updated 4 months ago
• Moopinger / smugglefuzz
  A rapid HTTP downgrade smuggling scanner written in Go.
  ☆254Updated 11 months ago
• doyensec / CSPTBurpExtension
  CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.
  ☆136Updated 9 months ago
• g0ldencybersec / gungnir
  CT Log Scanner
  ☆349Updated 3 weeks ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆627Updated last week
• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆261Updated last month
• nullenc0de / gofuzz
  ☆168Updated 7 months ago
• nxenon / h2spacex
  HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks
  ☆173Updated 5 months ago
• usdAG / FlowMate
  FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…
  ☆157Updated 5 months ago
• rs-loves-bugs / xsshunter
  ☆169Updated 2 months ago
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆632Updated last year
• devanshbatham / headerpwn
  A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
  ☆334Updated last year
• doyensec / CSPTPlayground
  CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
  ☆116Updated 3 weeks ago
• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆288Updated last year
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆190Updated last week
• yeswehack / pp-finder
  PP-finder Help you find gadget for prototype pollution exploitation
  ☆157Updated 8 months ago
• renniepak / CSPBypass
  ☆288Updated 3 weeks ago
• sysdig / wafer
  ☆199Updated 11 months ago
• c3l3si4n / pugdns
  An experimental high-performance DNS query bruteforce tool built with AF_XDP for extremely fast and accurate bulk DNS lookups.
  ☆193Updated 2 weeks ago
• edoardottt / pphack
  The Most Advanced Client-Side Prototype Pollution Scanner
  ☆219Updated this week
• g0ldencybersec / CloudRecon
  ☆481Updated 11 months ago
• Brum3ns / firefly
  Black box fuzzer for web applications
  ☆426Updated 9 months ago
• midoxnet / mapperplus
  MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.
  ☆172Updated 6 months ago
• cosad3s / postleaks
  Search for sensitive data in Postman public library.
  ☆204Updated 3 months ago
• attacksurge / ax
  The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning—On Your Terms. Easily distribute arbit…
  ☆455Updated this week
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆372Updated last week