MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts
☆83Feb 4, 2023Updated 3 years ago
Alternatives and similar repositories for metasecjs
Users that are interested in metasecjs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆74Jan 4, 2021Updated 5 years ago
- Quickly generate context-specific wordlists for content discovery from lists of URLs or paths☆241May 4, 2022Updated 4 years ago
- ☆35Oct 28, 2021Updated 5 years ago
- This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping☆48Nov 12, 2019Updated 6 years ago
- TSLint rules for Angular☆18Sep 2, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Print out URL schemas from an Android app☆133Feb 9, 2025Updated last year
- Proof-of-concept CORS exploitation tool.☆35Sep 7, 2019Updated 7 years ago
- yataf extracts secrets and paths from files or urls - its best used against javascript files☆54Sep 11, 2024Updated 2 years ago
- Timeinator is an extension for Burp Suite that can be used to perform timing attacks over an unreliable network such as the internet.☆22May 9, 2023Updated 3 years ago
- A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.☆558Mar 6, 2023Updated 3 years ago
- A bash script that fetches and maintains thousands of DNS resolvers☆64Aug 24, 2020Updated 6 years ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆650Jul 7, 2025Updated last year
- Scan secrets from Continuous Integration Build Logs☆53Oct 14, 2019Updated 7 years ago
- Burp Suite extension to discover assets from HTTP response.☆235Jan 22, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Demo of various ways to exploit post based reflected XSS☆18Jul 6, 2023Updated 3 years ago
- Continuous monitoring for JavaScript files☆223Dec 29, 2019Updated 6 years ago
- Reverse engineers GQL Schema and generates template payloads☆46Apr 5, 2019Updated 7 years ago
- Recursive DNS Subdomain Enumerator with dead-end avoidance system (BETA)☆146Apr 9, 2021Updated 5 years ago
- A tool to bruteforce nameservers when working with subdomain delegations to AWS.☆58Aug 22, 2019Updated 7 years ago
- Simple trick to increase readability of exceptions raised by Burp extensions written in Python☆45Mar 20, 2017Updated 9 years ago
- ☆54Dec 3, 2025Updated 11 months ago
- A wrapper around jq, to help you parse jq output!☆30Aug 23, 2020Updated 6 years ago
- Custom semgrep rules registry☆14Aug 23, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- Burp Extension for AWS Signing☆92Jan 10, 2025Updated last year
- An extension to use Semgrep inside Burp Suite.☆90May 23, 2025Updated last year
- A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…☆97Jun 5, 2021Updated 5 years ago
- Rules for detecting security issues in Angular 1.x☆30Apr 20, 2023Updated 3 years ago
- This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…☆358Mar 6, 2025Updated last year
- Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.☆290Nov 30, 2019Updated 6 years ago
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆761Jul 10, 2026Updated 3 months ago
- ☆27Sep 1, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Security Scanner for Go☆26Feb 11, 2019Updated 7 years ago
- ☆39Oct 20, 2023Updated 3 years ago
- A collection of BBRF agents that can be deployed to AWS lambda☆24Nov 17, 2024Updated last year
- DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intel…☆1,082Jan 3, 2025Updated last year
- An invoice management application built on the MEAN stack with intentional vulnerabilities used to demonstrate insecure configurations an…☆16Sep 4, 2020Updated 6 years ago
- A highly configurable Framework for easy automated web scanning☆385Jul 13, 2020Updated 6 years ago
- The Swiss Army knife for automated Web Application Testing☆2,384Jun 20, 2026Updated 4 months ago