Alternatives and similar repositories for STEWS

Users that are interested in STEWS are comparing it to the libraries listed below

• carlospolop / fuzzhttpbypass
  This tool use fuuzzing to try to bypass unknown authentication methods, who knows...
  ☆248Updated 11 months ago
• kleiton0x00 / ppmap
  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
  ☆512Updated 3 years ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆447Updated 3 years ago
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆335Updated 11 months ago
• PortSwigger / ip-rotate
  Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
  ☆255Updated last year
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆318Updated 6 months ago
• Karmaz95 / crimson
  Web Application Security Testing Tools
  ☆245Updated last year
• mlcsec / headi
  Customisable and automated HTTP header injection
  ☆253Updated last year
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆654Updated last year
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆460Updated 3 weeks ago
• iustin24 / chameleon
  ☆380Updated 2 years ago
• trufflesecurity / xsshunter
  ☆470Updated 5 months ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆481Updated 2 years ago
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆321Updated 6 months ago
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆383Updated 3 years ago
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆314Updated last week
• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆348Updated last year
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆562Updated last year
• swoops / eval_villain
  A Firefox Web Extension to improve the discovery of DOM XSS.
  ☆273Updated 8 months ago
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆371Updated 2 years ago
• dolevf / graphw00f
  graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…
  ☆654Updated last month
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆353Updated 3 years ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆665Updated 3 months ago
• barrracud4 / image-upload-exploits
  This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…
  ☆337Updated 4 years ago
• daffainfo / all-about-apikey
  Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)
  ☆276Updated last year
• PalindromeLabs / awesome-websocket-security
  Awesome information for WebSockets security research
  ☆271Updated 3 years ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆362Updated 2 months ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆381Updated 2 years ago
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆271Updated last year
• gsmith257-cyber / GraphCrawler
  GraphQL automated security testing toolkit
  ☆320Updated last year