XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily, an application security expert. XSSor was designed to help security testers by performing semi-automatic reflected and persistent XSS detection tests.
☆64Feb 22, 2021Updated 5 years ago
Alternatives and similar repositories for XSSor
Users that are interested in XSSor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Penetration Test Vulnerabilities Manager is an extension for Burp Suite, written in Jython. It was developed by Barak Tawily in order to …☆31Jul 25, 2021Updated 5 years ago
- all manner of wordlists☆24Jan 19, 2022Updated 4 years ago
- Burp Suite Extensions☆13Oct 19, 2021Updated 4 years ago
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 7 years ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Collection of nmap nse scripts☆24May 15, 2019Updated 7 years ago
- This includes all the templates of nuclei collected from different sources☆18Dec 30, 2022Updated 3 years ago
- My gfPatterns☆15Aug 31, 2021Updated 5 years ago
- Some contributions in the nuclei-templates repository☆64Updated this week
- ☆11Dec 5, 2020Updated 5 years ago
- Nuclei Templates☆14Jan 13, 2023Updated 3 years ago
- Wordlist to get files/ folders listed by the app that may expose passwords, sensitive file or folders☆22Jul 10, 2020Updated 6 years ago
- SubdomainDB is a simple self-hosted API that allows you to maintain your own subdomain database.☆30Jan 8, 2018Updated 8 years ago
- Burp Extension to identify PII data☆22Jan 29, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Funny Fuzzing Wordlist☆14Jun 14, 2022Updated 4 years ago
- my templates for the nuclei engine to find security vulnerabilities.☆10Aug 19, 2024Updated 2 years ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago
- External NSE script library (Collection of unofficial scripts) - Feel free to submit your NSE scripts!☆34Jan 5, 2022Updated 4 years ago
- Advanced reconnaissance framework for bug bounty hunters - Automate subdomain enumeration, vulnerability scanning, and security reconnais…☆60Apr 9, 2026Updated 5 months ago
- XSS Hunter Burp Plugin☆152Aug 31, 2018Updated 8 years ago
- My configs, tools and what not. For everytime that I blow up my vm....☆18Jan 21, 2020Updated 6 years ago
- This script scrapes the list of open Bug Bounty Programs from openbugbounty.org☆28Mar 22, 2022Updated 4 years ago
- These are payloads to hunt for various bugs in web applications. from SQLi, xss, RCE to path traversal and more with XSS and fuzzing.☆11Oct 3, 2020Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Mozilla Firefox extension which allows quick access to your google-dorking result☆19Jun 18, 2020Updated 6 years ago
- part of my wordlist to bruteforce DNS to find subdoamains.☆61Jul 26, 2021Updated 5 years ago
- ☆15Dec 27, 2022Updated 3 years ago
- A collection of scripts to extend Burp Suite☆142Apr 8, 2019Updated 7 years ago
- Shared wordlists used for common subdomains , directory bruteforcing etc.☆12Jun 23, 2026Updated 2 months ago
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆25Jun 12, 2023Updated 3 years ago
- Bug Bounty Recon wordlist Generator☆21Jul 17, 2020Updated 6 years ago
- ☆13Mar 15, 2022Updated 4 years ago
- Simple command shell collections☆35Mar 7, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆13May 13, 2018Updated 8 years ago
- Burp Extension for copying requests safely. It redacts headers like Cookie, Authorization and X-CSRF-Token for now. More support can be a…☆20May 17, 2020Updated 6 years ago
- ☆41Jul 24, 2022Updated 4 years ago
- Takeover script extracts CNAME record of all subdomains at once. TakeOver saves researcher time and increase the chance of finding subdom…☆100Apr 7, 2023Updated 3 years ago
- ☆12Jun 16, 2021Updated 5 years ago
- -☆11Nov 21, 2020Updated 5 years ago
- ☆37Jun 23, 2022Updated 4 years ago