Alternatives and similar repositories for STEWS

Users that are interested in STEWS are comparing it to the libraries listed below

• carlospolop / fuzzhttpbypass
  This tool use fuuzzing to try to bypass unknown authentication methods, who knows...
  ☆251Updated last year
• kleiton0x00 / ppmap
  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
  ☆511Updated 3 years ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆487Updated 3 years ago
• mlcsec / headi
  Customisable and automated HTTP header injection
  ☆261Updated last year
• PortSwigger / ip-rotate
  Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
  ☆260Updated 2 years ago
• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆357Updated 2 years ago
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆317Updated last month
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆668Updated last year
• trufflesecurity / xsshunter
  ☆483Updated this week
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆450Updated 3 years ago
• Karmaz95 / crimson
  Web Application Security Testing Tools
  ☆248Updated last year
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆388Updated 3 years ago
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆317Updated 7 months ago
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆372Updated 2 years ago
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆322Updated 7 months ago
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆339Updated last year
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆479Updated last week
• barrracud4 / image-upload-exploits
  This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…
  ☆337Updated 4 years ago
• iustin24 / chameleon
  ☆380Updated 2 years ago
• p0dalirius / webapp-wordlists
  This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contai…
  ☆522Updated 8 months ago
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆355Updated 3 years ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆568Updated last year
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆271Updated last year
• swoops / eval_villain
  A Firefox Web Extension to improve the discovery of DOM XSS.
  ☆276Updated 9 months ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆370Updated 3 months ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆383Updated 2 years ago
• anshumanpattnaik / http-request-smuggling
  HTTP Request Smuggling Detection Tool
  ☆520Updated last year
• dolevf / graphw00f
  graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…
  ☆661Updated 2 months ago
• gsmith257-cyber / GraphCrawler
  GraphQL automated security testing toolkit
  ☆324Updated last year
• 0xsha / GoLinkFinder
  A fast and minimal JS endpoint extractor
  ☆371Updated 9 months ago