PalindromeLabs / awesome-websocket-securityView external linksLinks
Awesome information for WebSockets security research
☆300Jan 10, 2022Updated 4 years ago
Alternatives and similar repositories for awesome-websocket-security
Users that are interested in awesome-websocket-security are comparing it to the libraries listed below
Sorting:
- Jumpstart multiple WebSocket servers quickly☆32Nov 23, 2021Updated 4 years ago
- A Security Tool for Enumerating WebSockets☆366Jan 10, 2022Updated 4 years ago
- Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk☆10Aug 18, 2022Updated 3 years ago
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆657Aug 28, 2025Updated 5 months ago
- bypass-url-parser☆1,111Feb 7, 2026Updated last week
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆297Sep 22, 2024Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆946Dec 31, 2021Updated 4 years ago
- ☆1,201Sep 2, 2022Updated 3 years ago
- One liner regex match to search inside JS files, using curl and grep!☆29Dec 26, 2021Updated 4 years ago
- De-clutter a list of URLs☆384Feb 3, 2026Updated last week
- A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the communit…☆3,637Nov 23, 2025Updated 2 months ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,496Jan 8, 2026Updated last month
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆175Oct 26, 2024Updated last year
- A repository that includes all the important wordlists used while bug hunting.☆1,375Mar 11, 2023Updated 2 years ago
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…☆1,145Jan 21, 2026Updated 3 weeks ago
- 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…☆1,490Feb 5, 2026Updated last week
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,515Jan 15, 2026Updated 3 weeks ago
- ☆160Jan 7, 2022Updated 4 years ago
- Automatic SSRF fuzzer and exploitation tool☆3,479Sep 4, 2025Updated 5 months ago
- ☆34Jun 23, 2021Updated 4 years ago
- Prototype Pollution and useful Script Gadgets☆1,581Jan 27, 2024Updated 2 years ago
- simple recon tool to help you for searching vulnerability on web server☆75Dec 30, 2025Updated last month
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆359Jul 17, 2023Updated 2 years ago
- Python's handling of NaN is....interesting?broken?...this project illustrates the issue☆13Dec 28, 2021Updated 4 years ago
- Smart context-based SSRF vulnerability scanner.☆361May 5, 2022Updated 3 years ago
- ☆300Dec 9, 2022Updated 3 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆975Jan 12, 2024Updated 2 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆373Jul 25, 2023Updated 2 years ago
- A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.☆1,969Sep 5, 2021Updated 4 years ago
- Tools & Interesting Things for RedTeam Ops☆2,250Updated this week
- Mind-Maps of Several Things☆2,623Jun 29, 2023Updated 2 years ago
- A toolkit for testing, tweaking and cracking JSON Web Tokens☆6,347May 1, 2025Updated 9 months ago
- Let's check if your target is vulnerable for client side prototype pollution.☆65Jan 9, 2024Updated 2 years ago
- Content-Type Research☆657Jun 29, 2025Updated 7 months ago
- Asset inventory of over 800 public bug bounty programs.☆1,517Feb 14, 2025Updated last year
- GraphQL automated security testing toolkit☆332Feb 20, 2024Updated last year
- 🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.☆426May 15, 2025Updated 8 months ago
- Hidden parameters discovery suite☆2,017Sep 8, 2024Updated last year
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆3,144May 13, 2023Updated 2 years ago