PortSwigger / nice-script
A JavaScript sandbox using proxies
☆20Updated 4 years ago
Alternatives and similar repositories for nice-script:
Users that are interested in nice-script are comparing it to the libraries listed below
- JavaScript parser and sandbox☆78Updated 8 years ago
- An extensible, heuristic-based vulnerability scanning tool for installed npm packages☆50Updated 3 years ago
- Scan secrets from Continuous Integration Build Logs☆51Updated 5 years ago
- Burp Suite extension to help make Graphql request more readable☆31Updated 7 years ago
- a shared short domain for XSS and other hacks☆32Updated 3 years ago
- Inject JS to the DOM to find vulnerable JavaScript libraries☆10Updated 7 months ago
- This is a tiny Chrome Extension that protects your from Clipboard XSS Attacks☆19Updated 10 years ago
- A Mozilla Firefox extension which allows quick access to your google-dorking result☆19Updated 4 years ago
- DirBuster for Node.js☆20Updated 6 years ago
- A medley of PoCs and exploits☆1Updated 5 years ago
- Fast browser-based network discovery module☆113Updated 3 years ago
- Nodejs application intentionally vulnerable to SSRF☆41Updated last year
- ☆12Updated 2 years ago
- JavaScript Static Code Analysis☆25Updated 10 years ago
- XXRF Shots - Useful for testing SSRF vulnerability☆74Updated 2 years ago
- Password Lense: reveal character types in a password☆23Updated this week
- An XSS smoke test for ReactJS☆38Updated 2 years ago
- CVE-2020-5902☆9Updated 4 years ago
- The Recon scanning tool scans websites for open files & directories specified in the custom config file. Default server configuration fil…☆15Updated 7 years ago
- Generate a personal Jekyll website using your Bibtex references.☆11Updated 5 years ago
- Subdomain Enumeration and Scanner☆33Updated 4 years ago
- Serbian/English wordlist for https://github.com/maurosoria/dirsearch☆19Updated 8 years ago
- Automate common Chrome Debug Protocol tasks to help debug web applications from the command-line and actively monitor and intercept HTTP …☆73Updated 3 years ago
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆14Updated 3 years ago
- A Reflected / Stored / DOM XSS Scanner based on Headless Chrome Node API via Puppeteer☆40Updated 2 years ago
- An Extended, Modulair, Host Discovery Framework☆43Updated 6 years ago
- A Go scraper that validates security.txt files and outputs them in the disclose.io JSON format.☆20Updated 2 weeks ago
- Parse OpenAPI specifications, previously known as Swagger specifications, into the BurpSuite for automating RESTful API testing – approve…☆42Updated last year
- ☆20Updated 5 years ago
- Fork of https://github.com/PortSwigger/param-miner for header smuggling research☆12Updated 3 years ago