Alternatives and similar repositories for upload-scanner

Users that are interested in upload-scanner are comparing it to the libraries listed below

• daeken / SSRFTest
  SSRF testing tool
  ☆244Updated 2 years ago
• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆631Updated last year
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆534Updated 6 years ago
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆621Updated 8 months ago
• 0xdekster / ReconNote
  Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…
  ☆414Updated 4 years ago
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆253Updated 2 years ago
• jaeles-project / jaeles-signatures
  Default signature for Jaeles Scanner
  ☆322Updated 3 years ago
• appsecco / the-art-of-subdomain-enumeration
  This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  ☆648Updated 6 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆623Updated last year
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆488Updated last year
• random-robbie / keywords
  ☆362Updated 3 years ago
• s0md3v / MyPapers
  Repository for hosting my research papers
  ☆508Updated last year
• In3tinct / See-SURF
  Python tool to find potential Server Side Reqest Forgery (SSRF) vulnerability parameters.
  ☆322Updated 2 weeks ago
• lc / theftfuzzer
  TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
  ☆315Updated 2 years ago
• zricethezav / h1domains
  HackerOne "in scope" domains
  ☆451Updated this week
• dark-warlord14 / JSScanner
  You can read the writeup on this script here
  ☆275Updated 4 years ago
• Damian89 / extended-ssrf-search
  Smart ssrf scanner using different methods like parameter brute forcing in post and get...
  ☆276Updated 4 years ago
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆748Updated 4 years ago
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆776Updated 2 years ago
• staaldraad / xxeserv
  A mini webserver with FTP support for XXE payloads
  ☆331Updated last year
• mazen160 / bfac
  BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source c…
  ☆551Updated 2 years ago
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆435Updated 2 years ago
• defparam / tiscripts
  Turbo Intruder Scripts
  ☆221Updated 5 years ago
• daeken / httprebind
  Automatic tool for DNS rebinding-based SSRF attacks
  ☆304Updated 4 years ago
• mazen160 / xless
  The Serverless Blind XSS App
  ☆340Updated last month
• PortSwigger / backslash-powered-scanner
  Finds unknown classes of injection vulnerabilities
  ☆687Updated last month
• luisfontes19 / xxexploiter
  Tool to help exploit XXE vulnerabilities
  ☆563Updated 2 years ago
• devoteam-cybertrust / burpcollaborator-docker
  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…
  ☆287Updated 5 months ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆879Updated 3 years ago
• gauravnarwani97 / Trishul
  Burp Extension written in Jython to hunt for common vulnerabilities found in websites. Developed by Gaurav Narwani to help people find vu…
  ☆236Updated 5 years ago