Alternatives and similar repositories for STEWS

Users that are interested in STEWS are comparing it to the libraries listed below

• carlospolop / fuzzhttpbypass
  This tool use fuuzzing to try to bypass unknown authentication methods, who knows...
  ☆255Updated last year
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆504Updated 3 years ago
• honoki / bbrf-server
  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices
  ☆325Updated 5 months ago
• kleiton0x00 / ppmap
  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
  ☆516Updated 3 years ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆453Updated 3 years ago
• mlcsec / headi
  Customisable and automated HTTP header injection
  ☆271Updated last year
• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆358Updated 2 years ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆575Updated 2 years ago
• barrracud4 / image-upload-exploits
  This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…
  ☆346Updated 4 years ago
• nicholasaleks / CrackQL
  CrackQL is a GraphQL password brute-force and fuzzing utility.
  ☆343Updated last year
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆734Updated 2 years ago
• 0xsha / GoLinkFinder
  A fast and minimal JS endpoint extractor
  ☆385Updated last year
• Charlie-belmer / nosqli
  NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
  ☆401Updated 4 years ago
• trufflesecurity / xsshunter
  ☆531Updated last month
• p0dalirius / webapp-wordlists
  This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contai…
  ☆531Updated last year
• Karmaz95 / crimson
  Web Application Security Testing Tools
  ☆250Updated last year
• anshumanpattnaik / http-request-smuggling
  HTTP Request Smuggling Detection Tool
  ☆534Updated 2 years ago
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆497Updated last week
• MayankPandey01 / Jira-Lens
  Fast and customizable vulnerability scanner For JIRA written in Python
  ☆344Updated last year
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆382Updated 2 years ago
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆274Updated 2 years ago
• swoops / eval_villain
  A Firefox Web Extension to improve the discovery of DOM XSS.
  ☆281Updated last year
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆362Updated 3 years ago
• glebarez / cero
  Scrape domain names from SSL certificates of arbitrary hosts
  ☆690Updated last year
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆383Updated 2 years ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆711Updated last month
• iustin24 / chameleon
  ☆382Updated 2 years ago
• PortSwigger / ip-rotate
  Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
  ☆271Updated 3 months ago
• hisxo / JSpector
  A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues
  ☆372Updated 2 years ago
• ethicalhackingplayground / bxss
  Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.
  ☆378Updated 7 months ago