KathanP19 / protoscan
Prototype Pollution Scanner
☆113Updated 3 years ago
Alternatives and similar repositories for protoscan:
Users that are interested in protoscan are comparing it to the libraries listed below
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆130Updated 4 years ago
- The project aims at creating target-specific wordlists for any web application that you are testing.☆65Updated 2 years ago
- ☆95Updated 3 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆62Updated last year
- Small tool to automate SSRF wordpress and XMLRPC finder☆80Updated 2 years ago
- Extract JavaScript files from burp suite project with ease.☆88Updated 3 years ago
- ☆66Updated 2 years ago
- Golang tool which helps dropping the irrelevant entries from your ffuf result file.☆131Updated 6 months ago
- Wordlist to bruteforce for LFI☆123Updated 5 years ago
- A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.☆104Updated 3 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆117Updated last year
- All known and unknown public POC's for wordpress themes and plugins☆78Updated 3 years ago
- ☆87Updated 3 years ago
- Collection grep patterns for Tomnomnom tools namely gf☆41Updated 4 years ago
- Identify virtual hosts by similarity comparison☆117Updated 7 months ago
- A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks☆58Updated 5 years ago
- ☆75Updated 10 months ago
- Detects request smuggling via HTTP/2 downgrades.☆92Updated 2 years ago
- ☆151Updated last year
- This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response ma…☆79Updated last year
- List of fresh DNS resolvers updated daily☆109Updated 2 years ago
- A reverse whois tool based on Whoxy API.☆164Updated 11 months ago
- Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs☆96Updated 4 years ago
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆66Updated 4 years ago
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆163Updated 4 years ago
- IIS shortname scanner + bruteforce☆51Updated last year
- ☆77Updated 2 years ago
- Feed it a list of subdomains, it will resolve them and tell you which ones are internal☆91Updated 3 years ago
- Find subdomains and takeovers.☆84Updated 2 years ago
- A fast tool to scan SAAS,PAAS App written in Go☆84Updated 2 years ago