Alternatives and similar repositories for BOR

Users that are interested in BOR are comparing it to the libraries listed below

• dsecuredcom / yataf
  yataf extracts secrets and paths from files or urls - its best used against javascript files
  ☆53Updated last year
• dsecuredcom / vhost-fuzzer
  Tool to fuzz for interesting vhost.
  ☆23Updated 8 months ago
• c3l3si4n / godeclutter
  Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.
  ☆59Updated 2 years ago
• defparam / haptyc
  ☆94Updated 4 years ago
• bebiksior / subwords
  Extract most frequent words in a list of subdomains
  ☆12Updated 7 months ago
• dwisiswant0 / gfx
  A wrapper around grep, to help you grep for things! - Improved version of gf by @tomnomnom.
  ☆62Updated last year
• doyensec / confuser
  Dependency Confusion Security Testing Tool
  ☆50Updated 3 years ago
• yeswehack / BCheck-Burp-scripts
  Bcheck scripts for Burp
  ☆28Updated last year
• ACK-J / postMessage-tracker-firefox
  A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
  ☆28Updated 9 months ago
• caido-community / burp2caido
  A tool to migrate Burpsuite HTTP history to Caido.
  ☆33Updated 4 months ago
• Cgboal / exclude-cdn
  Wraps projectdiscovery's cdncheck library to exclude CDN hosts from input passed over stdin
  ☆45Updated 2 years ago
• hakluke / hakstore
  ☆30Updated 2 years ago
• brevityinmotion / goodfaith
  Stay within program scope
  ☆37Updated 3 years ago
• Static-Flow / RepeaterSearch
  This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response ma…
  ☆79Updated last year
• honoki / burp-digitalocean-droplet-proxy
  Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet
  ☆58Updated 10 months ago
• kosmosec / proto-find
  Let's check if your target is vulnerable for client side prototype pollution.
  ☆65Updated last year
• hahwul / gitls
  🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline
  ☆59Updated 9 months ago
• amalmurali47 / swagroutes
  swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.
  ☆60Updated 2 years ago
• sw33tLie / ugly-scripts
  A collection of scripts for bug-bounty related stuff
  ☆39Updated 5 years ago
• 0xRTH / IISRecon
  IIS shortname scanner + bruteforce
  ☆53Updated last year
• PatrikFehrenbach / vilicus
  vīlicus is a bug bounty api dashboard
  ☆41Updated 2 years ago
• dillonfranke / protoburp
  Encode and Fuzz Custom Protobuf Messages in Burp Suite
  ☆33Updated 6 months ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆59Updated 3 years ago
• j3ssie / durl
  Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names
  ☆37Updated last year
• Sybil-Scan / TLDbrute
  A simple utility to generate domain names with all possible TLDs
  ☆24Updated 2 years ago
• dwisiswant0 / secpat2gf
  convert secret patterns to gf compatible.
  ☆39Updated 2 years ago
• pry0cc / nahamcon-axiom-demo-2021
  The commands and scripts I used in the Live Recon Village talks
  ☆38Updated 4 years ago
• xnl-h4ck3r / LookMark
  A browser bookmark to show hidden fields and enable disabled fields on a web page
  ☆20Updated last year
• fyoorer / ffufsee
  Ffuf output browser
  ☆39Updated 2 years ago
• defparam / h1stats
  a tool that compiles a csv of all h1 program stats
  ☆47Updated 2 years ago