Alternatives and similar repositories for upload-scanner:

Users that are interested in upload-scanner are comparing it to the libraries listed below

• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆620Updated last year
• daeken / SSRFTest
  SSRF testing tool
  ☆244Updated 2 years ago
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆527Updated 6 years ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆589Updated last year
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆603Updated 5 months ago
• In3tinct / See-SURF
  Python tool to find potential SSRF parameters
  ☆314Updated last month
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆489Updated last year
• incredibleindishell / SSRF_Vulnerable_Lab
  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  ☆702Updated last year
• random-robbie / keywords
  ☆360Updated 3 years ago
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆759Updated last year
• makuga01 / dnsFookup
  DNS rebinding toolkit
  ☆251Updated last year
• 0xdekster / ReconNote
  Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…
  ☆413Updated 4 years ago
• defparam / tiscripts
  Turbo Intruder Scripts
  ☆222Updated 4 years ago
• mazen160 / xless
  The Serverless Blind XSS App
  ☆340Updated last month
• appsecco / the-art-of-subdomain-enumeration
  This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  ☆645Updated 6 years ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆857Updated 3 years ago
• zricethezav / h1domains
  HackerOne "in scope" domains
  ☆438Updated this week
• PortSwigger / backslash-powered-scanner
  Finds unknown classes of injection vulnerabilities
  ☆655Updated 3 weeks ago
• lc / theftfuzzer
  TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
  ☆310Updated last year
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆429Updated 2 years ago
• gauravnarwani97 / Trishul
  Burp Extension written in Jython to hunt for common vulnerabilities found in websites. Developed by Gaurav Narwani to help people find vu…
  ☆235Updated 4 years ago
• Damian89 / extended-ssrf-search
  Smart ssrf scanner using different methods like parameter brute forcing in post and get...
  ☆274Updated 4 years ago
• allyomalley / LiveTargetsFinder
  Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts a…
  ☆364Updated 2 years ago
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆300Updated 2 years ago
• anantshri / svn-extractor
  simple script to extract all web resources by means of .SVN folder exposed over network.
  ☆462Updated last year
• ghsec / webHunt
  Web App bug hunting
  ☆561Updated 2 weeks ago
• mhmdiaa / second-order
  Second-order subdomain takeover scanner
  ☆387Updated 2 years ago
• daeken / httprebind
  Automatic tool for DNS rebinding-based SSRF attacks
  ☆298Updated 4 years ago
• ZephrFish / Wordlists
  Various Payload wordlists
  ☆235Updated 4 years ago
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆744Updated 4 years ago