XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily, an application security expert. XSSor was designed to help security testers by performing semi-automatic reflected and persistent XSS detection tests.
☆63Feb 22, 2021Updated 5 years ago
Alternatives and similar repositories for XSSor
Users that are interested in XSSor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Penetration Test Vulnerabilities Manager is an extension for Burp Suite, written in Jython. It was developed by Barak Tawily in order to …☆31Jul 25, 2021Updated 5 years ago
- all manner of wordlists☆23Jan 19, 2022Updated 4 years ago
- Burp Suite Extensions☆13Oct 19, 2021Updated 5 years ago
- Automated Recon Tool Installer☆16Jun 29, 2022Updated 4 years ago
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Collection of nmap nse scripts☆24May 15, 2019Updated 7 years ago
- My gfPatterns☆15Aug 31, 2021Updated 5 years ago
- This includes all the templates of nuclei collected from different sources☆18Dec 30, 2022Updated 3 years ago
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- Some contributions in the nuclei-templates repository☆63Oct 19, 2026Updated last week
- Nuclei Templates☆14Jan 13, 2023Updated 3 years ago
- ☆11Jan 27, 2022Updated 4 years ago
- A Burp Suite jython extension that saves a URL List from the Burp Proxy History or Burp Target Site Map as a text file.☆10Jun 11, 2013Updated 13 years ago
- Wordlist to get files/ folders listed by the app that may expose passwords, sensitive file or folders☆22Jul 10, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- XSS Hunter Burp Plugin☆152Aug 31, 2018Updated 8 years ago
- Automated iOS Frida Gadget injection and Testflight deployment using Frida and Fastlane☆14Mar 24, 2023Updated 3 years ago
- ☆11Dec 5, 2020Updated 5 years ago
- Burp Extension to identify PII data☆22Jan 29, 2021Updated 5 years ago
- ☆14Feb 7, 2024Updated 2 years ago
- A collection of scripts to extend Burp Suite☆142Apr 8, 2019Updated 7 years ago
- XSSRecon - Reflected XSS Scanner☆27Oct 7, 2020Updated 6 years ago
- ☆15Dec 27, 2022Updated 3 years ago
- Advanced reconnaissance framework for bug bounty hunters - Automate subdomain enumeration, vulnerability scanning, and security reconnais…☆59Apr 9, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- This script scrapes the list of open Bug Bounty Programs from openbugbounty.org☆29Mar 22, 2022Updated 4 years ago
- These are payloads to hunt for various bugs in web applications. from SQLi, xss, RCE to path traversal and more with XSS and fuzzing.☆10Oct 3, 2020Updated 6 years ago
- My configs, tools and what not. For everytime that I blow up my vm....☆18Jan 21, 2020Updated 6 years ago
- my templates for the nuclei engine to find security vulnerabilities.☆10Aug 19, 2024Updated 2 years ago
- part of my wordlist to bruteforce DNS to find subdoamains.☆61Jul 26, 2021Updated 5 years ago
- External NSE script library (Collection of unofficial scripts) - Feel free to submit your NSE scripts!☆34Jan 5, 2022Updated 4 years ago
- A powerful and lightweight tool for bug bounty hunters and security researchers to identify hardcoded secrets, API keys, tokens, credenti…☆17Aug 29, 2025Updated last year
- Funny Fuzzing Wordlist☆14Jun 14, 2022Updated 4 years ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.☆37Mar 7, 2021Updated 5 years ago
- Bug Bounty Recon wordlist Generator☆21Jul 17, 2020Updated 6 years ago
- SubdomainDB is a simple self-hosted API that allows you to maintain your own subdomain database.☆30Jan 8, 2018Updated 8 years ago
- ☆12Jun 16, 2021Updated 5 years ago
- ☆13Mar 15, 2022Updated 4 years ago
- Simple command shell collections☆35Mar 7, 2021Updated 5 years ago
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆26Jun 12, 2023Updated 3 years ago