🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages
☆37Jan 31, 2026Updated 6 months ago
Alternatives and similar repositories for Dependency-Confusion-Hunter
Users that are interested in Dependency-Confusion-Hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 🔐 Chrome Extension - Detect hardcoded tokens, API keys & secrets in JavaScript files☆47Dec 15, 2025Updated 7 months ago
- Burp Suite extension — passively detects secrets, API keys, credentials, JWTs & PII in HTTP traffic. 160+ detection rules, bulk scan, ent…☆42May 15, 2026Updated 2 months ago
- Chrome extension to extract domains from Google search results - by ofjaaah☆20Dec 24, 2025Updated 7 months ago
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆23Jun 29, 2026Updated last month
- It serves as a practical guide for security researchers to identify and test WordPress targets effectively during bug bounty hunting.☆27Jul 19, 2026Updated 3 weeks ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A command-line utility for auditing DNS configuration using Zonemaster API☆34Aug 21, 2023Updated 2 years ago
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 8 months ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆26Jul 15, 2026Updated 3 weeks ago
- Shodan-Grabber is a Node.js tool for scraping IP addresses and other information from Shodan's web interface. It utilizes Puppeteer for w…☆17Nov 13, 2024Updated last year
- A curated GitHub repository that's in-scope and eligible for bounty.☆21Aug 10, 2022Updated 3 years ago
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Jan 29, 2026Updated 6 months ago
- URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for …☆15Apr 1, 2025Updated last year
- Repository aimed at helping to perform pentests on flutter applications☆19Jul 10, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆10Nov 21, 2023Updated 2 years ago
- A Caido plugin to monitor, intercept, and debug JavaScript sinks based on customizable configurations.☆46Apr 8, 2026Updated 4 months ago
- Pentest Automation Tool☆13Oct 18, 2023Updated 2 years ago
- ☆94Sep 24, 2024Updated last year
- Magento Security Scanner☆13Jan 10, 2022Updated 4 years ago
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Aug 25, 2024Updated last year
- Vulnerability Research Group☆17Jul 2, 2026Updated last month
- ☆86May 26, 2026Updated 2 months ago
- Demonstrate how a signed driver can bypass defenses to deploy ransomware on Windows 11 with advanced AV and UAC evasion techniques.☆33Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Burp extension to fuzz/brute force GenAI/LLM prompts using a list of various payloads.☆35Sep 4, 2025Updated 11 months ago
- Fast Go-based XSS assessment toolkit☆20Mar 18, 2026Updated 4 months ago
- HackerOne Notifier is an automated bot that monitors new programs launched on HackerOne and sends Telegram Bot notifications whenever a n…☆22Nov 4, 2025Updated 9 months ago
- ☆52Oct 1, 2025Updated 10 months ago
- A Chrome extension that automatically scans web pages and internal links for user-defined keywords, storing results and sending notificat…☆26Sep 28, 2025Updated 10 months ago
- web cache deception detect☆43May 14, 2026Updated 2 months ago
- Tool to fuzz for interesting vhost.☆22Jan 8, 2025Updated last year
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆58Jul 12, 2026Updated 3 weeks ago
- PDF Files for Pentesting☆15Jun 5, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- Differential Fuzzer to hunt for logic bugs on Perl Modules☆26Updated this week
- VulnSeer combines the power of Nmap's service detection with multiple AI providers to deliver intelligent vulnerability assessments. Unli…☆43Jun 12, 2025Updated last year
- Match & Replace rules for Portswigger's Burp that operate globally across all utilities.☆24Jan 26, 2026Updated 6 months ago
- A collection of awesome one-liners for bug bounty hunting.☆60Apr 12, 2026Updated 3 months ago
- Learn how to intercept flutter apps☆25Jan 19, 2024Updated 2 years ago
- Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own person…☆152Dec 18, 2025Updated 7 months ago