Alternatives and similar repositories for upload-scanner:

Users that are interested in upload-scanner are comparing it to the libraries listed below

• GoSecure / dtd-finder
  List DTDs and generate XXE payloads using those local DTDs.
  ☆617Updated 10 months ago
• daeken / SSRFTest
  SSRF testing tool
  ☆243Updated 2 years ago
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆594Updated 3 months ago
• whitel1st / docem
  A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)
  ☆566Updated 11 months ago
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆522Updated 6 years ago
• incredibleindishell / SSRF_Vulnerable_Lab
  This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack
  ☆684Updated last year
• weev3 / LKWA
  Lesser Known Web Attack Lab
  ☆331Updated 4 years ago
• appsecco / the-art-of-subdomain-enumeration
  This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  ☆638Updated 5 years ago
• xsscx / Commodity-Injection-Signatures
  Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
  ☆393Updated 5 months ago
• lc / theftfuzzer
  TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
  ☆309Updated last year
• 0xdekster / ReconNote
  Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…
  ☆412Updated 4 years ago
• Damian89 / extended-ssrf-search
  Smart ssrf scanner using different methods like parameter brute forcing in post and get...
  ☆276Updated 3 years ago
• modzero / mod0BurpUploadScanner
  HTTP file upload scanner for Burp Proxy
  ☆485Updated last year
• root4loot / rescope
  Bugbounty scope tool
  ☆323Updated last month
• PortSwigger / autorize
  Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease appli…
  ☆229Updated last month
• defparam / tiscripts
  Turbo Intruder Scripts
  ☆220Updated 4 years ago
• internetwache / CT_subdomains
  An hourly updated list of subdomains gathered from certificate transparency logs
  ☆342Updated 3 years ago
• s0md3v / MyPapers
  Repository for hosting my research papers
  ☆505Updated 9 months ago
• assetnote / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆831Updated 3 years ago
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆750Updated last year
• cujanovic / CRLF-Injection-Payloads
  Payloads for CRLF Injection
  ☆221Updated 3 months ago
• SilverPoision / a-full-list-of-wordlists
  this contain the burp pack
  ☆206Updated 7 years ago
• PortSwigger / backslash-powered-scanner
  Finds unknown classes of injection vulnerabilities
  ☆643Updated last year
• ZephrFish / Wordlists
  Various Payload wordlists
  ☆234Updated 4 years ago
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆297Updated last year
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆738Updated 4 years ago
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆428Updated last year
• 0xC01DF00D / Collabfiltrator
  Exfiltrate blind remote code execution output over DNS via Burp Collaborator.
  ☆251Updated 2 months ago
• zricethezav / h1domains
  HackerOne "in scope" domains
  ☆419Updated this week