This tool allows to automatically test for Content Security Policy bypass payloads.
☆46Sep 4, 2024Updated 2 years ago
Alternatives and similar repositories for CSPass
Users that are interested in CSPass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆50Jan 20, 2022Updated 4 years ago
- By using its cutting edge technology (lolnope), you can now have a persistent multi reverse pty handler!☆103Mar 30, 2025Updated last year
- WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a…☆65Jun 27, 2025Updated last year
- ☆13Jun 27, 2023Updated 3 years ago
- A multi-purpose, programming oriented Discord bot.☆15Apr 15, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Python script to check if there is any differences in responses of an application when the request comes from a search engine's crawler.☆26Oct 1, 2023Updated 3 years ago
- Auto-Recon script that will help you in the Burp Suite Certified Practitioner Examor with any web-security lab.☆61Jul 8, 2024Updated 2 years ago
- A python script to automatically dump files and source code of a Symfony server in debug mode.☆13Sep 8, 2026Updated last month
- A tool for recovering credentials from sniffed PPPoE, RADIUS and L2TPv2 CHAP authentications☆19Apr 25, 2016Updated 10 years ago
- A tool to extract and dump files of mercurial SCM exposed on a web server.☆13Jan 31, 2025Updated last year
- A simple python script to dump remote files through a local file read or local file inclusion web vulnerability.☆79Mar 16, 2024Updated 2 years ago
- Kubernetes exploitation tool☆361Feb 25, 2026Updated 7 months ago
- CVE-2022-30780 - lighttpd remote denial of service☆17Mar 16, 2024Updated 2 years ago
- SNMPv3 Authentication Bruteforcer☆40Aug 12, 2021Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A webshell plugin and interactive shell for pentesting JoGet application.☆14May 19, 2022Updated 4 years ago
- Akinator for SSTI☆17Feb 11, 2026Updated 8 months ago
- A complete table of results of types comparison in multiple languages☆38Sep 28, 2022Updated 4 years ago
- Some tips for Bug Bounty using LibreOffice☆60Feb 28, 2025Updated last year
- The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.☆149Oct 28, 2024Updated last year
- Decode the values of common Windows properties such as userAccountControl and sAMAccountType.☆26Apr 18, 2026Updated 5 months ago
- EPH is a tool which allows you to perform scans to find exposed administration panels that can lead to security vulnerabilities.☆19Jul 17, 2022Updated 4 years ago
- A nodeJS dynamic crawler.☆20Jan 5, 2023Updated 3 years ago
- A script to enumerate valid usernames based on the requests response times.☆24May 3, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PP-finder Help you find gadget for prototype pollution exploitation☆208May 15, 2026Updated 4 months ago
- A tutorial on using JohnTheRipper and Hashcat to crack lost keepass passwords☆80Apr 30, 2021Updated 5 years ago
- Generate email permutations from a name and verify if this email exist with different providers (gmail, duckduckgo, yahoo, yandex)☆42Feb 25, 2025Updated last year
- Easily create and share Proof of Concepts in HTML, JavaScript, etc. with custom headers, all via query parameters☆16Sep 16, 2026Updated 3 weeks ago
- A Python script to list valid emails of GSuite accounts.☆16Feb 11, 2025Updated last year
- This repository is a collection of JavaScript gadgets that can be used to bypass XSS mitigations such as Content Security Policy (CSP) an…☆149Feb 4, 2026Updated 8 months ago
- Discord Root-Me bot - built with Discord.js☆21May 27, 2025Updated last year
- A python script to dump all the challenges locally of a CTFd-based Capture the Flag.☆174Apr 3, 2026Updated 6 months ago
- Quelques conseils autour des obligations légales, fiscales et juridique pour la pratique du Bug Bounty en France☆151Apr 21, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- OS Command Execution☆28Aug 23, 2018Updated 8 years ago
- A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.☆821Dec 9, 2025Updated 10 months ago
- Extract NFS files from wireshark capture (pcap)☆29Aug 5, 2024Updated 2 years ago
- A python module to explore the object tree to extract paths to interesting objects in memory.☆106Jan 31, 2025Updated last year
- Sources et Writeup du Breizh CTF 2025☆15Mar 26, 2025Updated last year
- Network scanner☆46Sep 29, 2026Updated 2 weeks ago
- The Linux x86/x86-64 last chance debugging tool☆48Nov 7, 2022Updated 3 years ago