An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.
☆40Jun 18, 2026Updated 4 months ago
Alternatives and similar repositories for ressrf
Users that are interested in ressrf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Live iOS runtime auditor for jailbroken devices. HTTPS dashboard served from the phone.☆15Jun 28, 2026Updated 4 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- CLI for authorized iOS pentest lab setup, Frida/Objection readiness checks, and IPA installation.☆23Jul 28, 2026Updated 3 months ago
- CVE lookup + Wappalyzer☆39Oct 24, 2026Updated 3 weeks ago
- ☆16Jun 28, 2026Updated 4 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆14Mar 14, 2026Updated 8 months ago
- Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self…☆18Jun 23, 2026Updated 4 months ago
- Active network shares enumeration tool.☆39Jul 17, 2026Updated 3 months ago
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆33May 23, 2026Updated 5 months ago
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆43Apr 12, 2026Updated 7 months ago
- Open-source LLM red-teaming technique toolkit (162 transforms, 36 mutators, 25 tool surfaces). MIT.☆337Jun 9, 2026Updated 5 months ago
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆129Aug 7, 2026Updated 3 months ago
- A Python tool to scan JavaScript files for sensitive information exposure, helping security researchers identify potential leaks of API k…☆18Feb 17, 2026Updated 8 months ago
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex…☆187Jul 21, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The tool is used to create a local webserver and force authenticate, which captures the logged in users NTLM v2 hash.☆16Feb 17, 2026Updated 8 months ago
- Bash script to spray known credentials against multiple services with netexec, inspired by nxcspray and nxc-sweep☆13Sep 2, 2026Updated 2 months ago
- ☆42Oct 21, 2026Updated 3 weeks ago
- This is a proof-of-work for abusing "fsmonitor" against IDE.☆49Nov 22, 2025Updated 11 months ago
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆323Sep 30, 2026Updated last month
- A curated list of powerful one-liners from different sources☆11Mar 29, 2025Updated last year
- A Firefox browser extension for extracting secrets, endpoints, and custom regex matches from JavaScript sources on any web page.☆12Mar 30, 2026Updated 7 months ago
- Claude Code Remote Code Execution☆14Feb 3, 2026Updated 9 months ago
- ☆22Oct 11, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Advanced static Linux kernel local privilege escalation toolkit for discovery and analysis.☆39Jun 19, 2026Updated 4 months ago
- exploit CVE-2024-40725 (Apache httpd) with☆12Dec 18, 2024Updated last year
- The one shot API attacker tool - finds the API url from the given root simulate the automated attacks☆35Jul 21, 2026Updated 3 months ago
- ☆24Jun 20, 2026Updated 4 months ago
- STViewer is a viewer and search tool for email archives such as OST, PST, and mbox written in Rust. Runs on Windows, macOS and Linux☆28Nov 3, 2026Updated last week
- Algopwn is an interactive Python tool for security researchers and bug-bounty hunters to audit Algolia API keys. It detects ACLs, disting…☆11Nov 6, 2025Updated last year
- C2 Framework - Advanced Red Team Tool☆22Jun 1, 2026Updated 5 months ago
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- A two-domain Active Directory lab - lab.local + corp.local, 5 machines, 3 flags. Runs on VirtualBox. Spin it up and see how far you get.☆33Jul 26, 2026Updated 3 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- ☆10Aug 7, 2025Updated last year
- ☆18May 25, 2026Updated 5 months ago
- 🪄 XSSDynaGen is a tool designed to analyze URLs with parameters, identify the characters allowed by the server, and generate advanced XS…☆56Mar 24, 2026Updated 7 months ago
- ☆14Apr 9, 2026Updated 7 months ago
- Malicious package & supply-chain intelligence☆203Updated this week
- Hides in your attic... I mean process☆26Apr 29, 2026Updated 6 months ago
Are these results useful?