A framework for the detection of COSI vulnerabilities / XS-Leaks
☆14Mar 29, 2023Updated 3 years ago
Alternatives and similar repositories for Basta-COSI
Users that are interested in Basta-COSI are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Stats about HTTP response security headers usage mentioned by the OSHP.☆16Jan 25, 2026Updated 7 months ago
- Following OWASP TOP 10 (the top ten most critical web application security risk) I decided to build an XSS Scanner.☆12Dec 12, 2022Updated 3 years ago
- This automation protect against subdomain takeover on AWS env which also send alerts on slack.☆12Aug 1, 2021Updated 5 years ago
- TheThing: an open-source tool to detect DOM Clobbering vulnerabilities☆57Oct 25, 2023Updated 2 years ago
- Searcher for cross-site leaks (XS-Leaks)☆82Dec 27, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆17Mar 19, 2022Updated 4 years ago
- AWS,AZURE,GOOGLE CLOUD IP CIDRS☆50Feb 14, 2022Updated 4 years ago
- ☆27Jul 30, 2021Updated 5 years ago
- Webcrawler to collect cookie data and usage purposes, built using OpenWPM.☆13Jun 3, 2023Updated 3 years ago
- Burp Suite extension to log GraphQL operations as a comment☆24Aug 9, 2021Updated 5 years ago
- Just some bash scripting to help your recon.☆16Feb 4, 2026Updated 6 months ago
- HTTP requests of FrontPage expolit☆26Dec 19, 2013Updated 12 years ago
- PoC List☆10Sep 4, 2022Updated 3 years ago
- ☆18Apr 26, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Find XS-Leaks in the browser by diffing DOM-Graphs in two states☆19Jun 24, 2026Updated 2 months ago
- Supporting material for the frida scripting guide☆22Jul 2, 2022Updated 4 years ago
- java写的课程设计，聊天室小程序☆10Mar 30, 2015Updated 11 years ago
- Remote Code Execution EJS Web Applications using express-fileupload☆12Aug 17, 2021Updated 5 years ago
- A quick way to perform a bulk whois query. Utilizes Team Cymru's service. Requires netcat.☆11Feb 11, 2012Updated 14 years ago
- A polyglot static analysis engine for detecting vulnerabilities in scripting languages native extensions based on joern.☆22Sep 1, 2025Updated 11 months ago
- ☆16Jan 9, 2025Updated last year
- TP-Framework: Testability Pattern Framework for SAST☆17May 10, 2024Updated 2 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆10Sep 22, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- nxdomain subdomain enumeration☆10Jul 17, 2022Updated 4 years ago
- Removes duplicate entries from a file, resulting in only unique parameter combinations. Useful for parsing waybackurls and making recon m…☆12May 31, 2020Updated 6 years ago
- Android application penetration testing for the masses.☆14Apr 12, 2019Updated 7 years ago
- This Burp Suite extension enables the generation of shareable links to specific requests which other Burp Suite users can import.☆13May 20, 2022Updated 4 years ago
- JAW: A Graph-based Security Analysis Framework for Client-side JavaScript☆119Feb 13, 2026Updated 6 months ago
- A simple tool which makes creating nuclei templates even easier.☆36Jun 23, 2024Updated 2 years ago
- a Machine Learning powered CSRF attacks finding tool☆27Mar 8, 2019Updated 7 years ago
- XSS-Freak is an xss scanner fully written in python3 from scratch. it is one of its kind since it crawls the website for all possible lin…☆15Nov 25, 2019Updated 6 years ago
- Gathers urls from common crawl☆35Nov 9, 2019Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Bug Bounty Tools☆34Jul 2, 2020Updated 6 years ago
- A web crawling tool which tests websites for SSL, Cookies and ADA compliance and also suggests ways to fix them.☆29Dec 9, 2022Updated 3 years ago
- Simple command shell collections☆35Mar 7, 2021Updated 5 years ago
- Ruby ARP Toolkit☆14Apr 15, 2021Updated 5 years ago
- Return domains in CSP headers in http response☆16Aug 17, 2021Updated 5 years ago
- This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.☆13Dec 29, 2020Updated 5 years ago
- ICCBot: A Fragment-Aware and Context-Sensitive ICC Resolution Tool for Android Applications☆45Jan 26, 2024Updated 2 years ago