PortSwigger / retire-js
Burp/ZAP extension that integrate Retire.js repository to find vulnerable Javascript libraries.
☆33Updated 2 years ago
Related projects: ⓘ
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆41Updated last year
- Burp extension for quickly copying request/response data.☆26Updated this week
- Collection of scanner checks missing in Burp☆26Updated 4 years ago
- ☆17Updated 2 years ago
- Add headers to all Burp requests to bypass some WAF products☆37Updated 9 months ago
- A Web-UI for subdomain enumeration (subfinder)☆53Updated 4 years ago
- A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.☆22Updated 6 months ago
- Parse OpenAPI specifications, previously known as Swagger specifications, into the BurpSuite for automating RESTful API testing – approve…☆39Updated 7 months ago
- Bucket Flaws ( S3 Bucket Mass Scanner ): A Simple Lightweight Script to Check for Common S3 Bucket Misconfigurations☆55Updated 4 years ago
- Kubernetes Scanner☆41Updated 2 years ago
- ☆33Updated this week
- A Burp Suite extension to add a custom header (e.g. JWT)☆18Updated 3 years ago
- A command-line tool for Cross-Site WebSocket Hijacking☆39Updated 11 months ago
- A collection of simple tools and poc-builders☆39Updated last year
- Another Subdomain ENumeration Tool☆10Updated last year
- Send notifications on different channels such as Slack, Telegram, Discord etc.☆39Updated last year
- ☆10Updated 3 years ago
- ☆42Updated last year
- This is the Go Server that relays all HTTP requests and responses between clients.☆26Updated 11 months ago
- A simple tool to detect wildcards domain based on Amass's wildcards detector.☆62Updated 3 years ago
- Broken Link Hijacking Burp Extension☆54Updated 5 years ago
- GQL Burp Extension☆21Updated 2 years ago
- The original slurp source☆32Updated 5 years ago
- ☆45Updated this week
- Automatically modify the User-Agent header in all Burp requests☆52Updated 6 years ago
- Get all possible href | src | url from target url or domain☆40Updated 4 years ago
- a shared short domain for XSS and other hacks☆31Updated 2 years ago
- subdomain bruteforce list☆96Updated 2 years ago
- Use normal web pentest tools to hack Websockets☆17Updated 4 years ago
- Some of my bug bounty tools☆47Updated 4 years ago