Alternatives and similar repositories for STEWS

Users that are interested in STEWS are comparing it to the libraries listed below

• carlospolop / fuzzhttpbypass
  This tool use fuuzzing to try to bypass unknown authentication methods, who knows...
  ☆253Updated last year
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆498Updated 3 years ago
• kleiton0x00 / ppmap
  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
  ☆516Updated 3 years ago
• trufflesecurity / xsshunter
  ☆525Updated 2 weeks ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆574Updated 2 years ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆452Updated 3 years ago
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆361Updated 3 years ago
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆342Updated last year
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆330Updated 11 months ago
• mlcsec / headi
  Customisable and automated HTTP header injection
  ☆271Updated last year
• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆358Updated 2 years ago
• Karmaz95 / crimson
  Web Application Security Testing Tools
  ☆251Updated last year
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆323Updated 4 months ago
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆345Updated 11 months ago
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆400Updated 4 years ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆713Updated last week
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆379Updated 2 years ago
• swoops / eval_villain
  A Firefox Web Extension to improve the discovery of DOM XSS.
  ☆280Updated last year
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆693Updated last year
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆494Updated this week
• shelld3v / aquatone
  A Tool for Domain Flyovers
  ☆125Updated last year
• dolevf / graphw00f
  graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…
  ☆772Updated 5 months ago
• PortSwigger / ip-rotate
  Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
  ☆270Updated 2 months ago
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆274Updated 2 years ago
• iustin24 / chameleon
  ☆381Updated 2 years ago
• p0dalirius / webapp-wordlists
  This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contai…
  ☆530Updated last year
• anshumanpattnaik / http-request-smuggling
  HTTP Request Smuggling Detection Tool
  ☆533Updated last year
• xm1k3 / cent
  Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…
  ☆1,027Updated 3 months ago
• 0xsha / GoLinkFinder
  A fast and minimal JS endpoint extractor
  ☆383Updated last year
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆689Updated last year