Small script to check a list of domains against open redirect vulnerability
☆30Jan 22, 2022Updated 4 years ago
Alternatives and similar repositories for dom-red
Users that are interested in dom-red are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆16May 3, 2021Updated 5 years ago
- Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.☆39Jan 20, 2023Updated 3 years ago
- Finds Directory Listings or open S3 buckets from a list of URLs☆52Dec 1, 2021Updated 4 years ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Jan 29, 2026Updated 6 months ago
- A simple python script which can check HTTP status of branch of URLs/Subdomains and grab URLs/Subdomain title☆12Oct 16, 2019Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆32Apr 6, 2021Updated 5 years ago
- A Tool to Extract Open Kibana Instances on Internet and Map them to their Corresponding Organizations for Bug Bounty.☆16Sep 7, 2019Updated 6 years ago
- Extract parameters/paths from urls☆17Aug 2, 2020Updated 6 years ago
- Python script to give you subsets of the nmap "top-ports". For example, I want the 10th to 100th most common TCP ports. Spits out a comma…☆18Mar 8, 2020Updated 6 years ago
- GraphQL automatic fuzzing tool☆16Jul 16, 2021Updated 5 years ago
- SpiderFoot automates OSINT collection so that you can focus on analysis.☆12Apr 20, 2023Updated 3 years ago
- misc scripts/utils that I've written that aren't deserving of own repos.☆14Aug 18, 2021Updated 4 years ago
- #BugBounty #BugBounty Tools #WebDeveloper Tool☆38May 17, 2025Updated last year
- ☆27Mar 5, 2023Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- My Tools For Bug Bounty☆70Sep 23, 2024Updated last year
- ☆15Jan 15, 2026Updated 6 months ago
- Fuzzing for LFI using Burpsuite☆69Oct 4, 2016Updated 9 years ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆48Jan 11, 2023Updated 3 years ago
- RAS(RAndom Subdomain) Fuzzer☆43Jan 22, 2020Updated 6 years ago
- S3 bucket finder from html,js and bucket misconfiguration testing tool☆34Feb 10, 2020Updated 6 years ago
- CRLF and open redirect fuzzer☆113Aug 31, 2021Updated 4 years ago
- All about subdomain enumeration☆16Feb 5, 2019Updated 7 years ago
- ☆15Apr 26, 2014Updated 12 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The format of various s3 buckets is convert in one format. for bugbounty and security testing.☆90May 6, 2023Updated 3 years ago
- Chrome extension that finds DOM based XSS vulnerabilities☆75Jun 3, 2025Updated last year
- ☆10Jan 25, 2023Updated 3 years ago
- Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdom…☆100Apr 7, 2023Updated 3 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SS…☆175Nov 11, 2020Updated 5 years ago
- <img src=x onerroralert(1);>☆11Jul 12, 2014Updated 12 years ago
- DigiNinja's bucket_finder utility☆17Aug 30, 2016Updated 9 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆64Apr 17, 2020Updated 6 years ago
- Test domain expiration dates.☆12Dec 2, 2022Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A tool to bulk extract data from ServiceNow.☆11Jul 2, 2021Updated 5 years ago
- Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.☆16Jul 30, 2020Updated 6 years ago
- Morgan is a powerful tool designed to help security researchers, developers, and security auditors identify sensitive information, vulner…☆57Feb 2, 2025Updated last year
- This tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable☆54Dec 10, 2025Updated 8 months ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆124May 12, 2026Updated 3 months ago
- sshchecker is a fast dedicated ssh brute-forcing tool to check ssh login on the giving IP list.☆23Feb 8, 2026Updated 6 months ago
- simple code directory brute☆17Feb 26, 2021Updated 5 years ago