Laravel PHP framework black-box vulnerability scanner
☆42Sep 3, 2024Updated last year
Alternatives and similar repositories for larascan
Users that are interested in larascan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 5 months ago
- Akinator for SSTI☆17Feb 11, 2026Updated 5 months ago
- Automated GitHub secret scanning with smart alerting & monitoring.☆31Jan 15, 2026Updated 6 months ago
- ☆11Apr 8, 2024Updated 2 years ago
- An advanced, read-only Kubernetes security scanner for identifying misconfigurations and vulnerabilities.☆18Jul 3, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of one off hacks and simple scripts☆26Mar 21, 2023Updated 3 years ago
- Stay within program scope☆37Aug 17, 2022Updated 3 years ago
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- Burp plugin for jxscout☆23May 12, 2025Updated last year
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆10Sep 22, 2023Updated 2 years ago
- Bug Hunting Handbook☆12Aug 11, 2022Updated 3 years ago
- A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment☆46Jun 3, 2024Updated 2 years ago
- Gampung tools for find nuclei template from github☆12Sep 6, 2023Updated 2 years ago
- AI Substitutor is an extension for Burp Suite that uses AI functionality to substitute values of HTTP request parameters and headers.☆29Apr 30, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Like DLP☆11Jan 27, 2025Updated last year
- Saves pages to Wayback machine☆12Dec 2, 2024Updated last year
- ☆31Jun 5, 2023Updated 3 years ago
- Crawlex is a powerful Chrome extension designed to assist bug bounty hunters in their work by enabling easy crawling of all possible URLs…☆12May 28, 2023Updated 3 years ago
- Easy discovery of assets☆13Jun 22, 2022Updated 4 years ago
- Bash script to extract data from the Waybackmachine☆11Mar 15, 2021Updated 5 years ago
- Ffuf output browser☆38Feb 25, 2023Updated 3 years ago
- Go scanner to find web cache poisoning vulnerabilities in a list of URLs☆150Feb 21, 2024Updated 2 years ago
- Will share some interesting writeups here :)☆18Oct 18, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various e…☆50Apr 29, 2024Updated 2 years ago
- Chameleon Wordlists☆15Sep 13, 2022Updated 3 years ago
- ☆11Jul 5, 2023Updated 3 years ago
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆36Apr 9, 2026Updated 3 months ago
- ☆11Jun 30, 2025Updated last year
- burpsuite extension to analyze javascript files using semgrep☆13Feb 3, 2025Updated last year
- The IDOR IN works by systematically scanning a target web application and examining various endpoints, parameters, and data access points…☆27Jun 25, 2023Updated 3 years ago
- n8n workflows related to bug bounty☆47Oct 27, 2025Updated 9 months ago
- A bash tool used to install famous bug bounty tools. Mainly used when setting up a fresh environment.☆16Mar 20, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Automatic SQL injection and database takeover tool☆45Nov 27, 2025Updated 8 months ago
- ☆13Jun 10, 2024Updated 2 years ago
- Your subdomains are free for the taking - no API key, no mistaking! 🕺☆38Feb 27, 2023Updated 3 years ago
- ☆10Jul 3, 2021Updated 5 years ago
- ☆13Jul 12, 2021Updated 5 years ago
- Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack☆42Dec 23, 2022Updated 3 years ago
- Use these VDP in Bug Hunting, These VDP are checked and verified by Bug Hunters☆21Aug 9, 2022Updated 3 years ago