Alternatives and similar repositories for payloads

Users that are interested in payloads are comparing it to the libraries listed below

• HernanRodriguez1 / ScanMySQLiErrorBased-Nuclei
  ☆22Updated 3 years ago
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 4 years ago
• 0xPugal / bugbounty_profile
  Automate bug bounty recon using bash alias
  ☆14Updated last year
• bp0lr / myGF_patterns
  ☆21Updated 4 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• ExpLangcn / agartha
  a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …
  ☆49Updated 3 years ago
• byt3hx / gup
  gup aka Get All Urls parameters to create wordlists for brute forcing parameters.
  ☆18Updated 3 years ago
• gwen001 / bxss
  Alternative to XSS Hunter for blind XSS.
  ☆51Updated 2 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• BrownBearSec / Utils-and-Wrappers
  A repo for tools, utils, and wrappers that are to small to put in their own repo.
  ☆23Updated 2 years ago
• r00tkie / grep-pattern
  collection of various grep patterns collected from tomnomnom/gf and other places
  ☆22Updated 4 years ago
• ahmad0x1 / Acquisitions
  Python Script to Print the name of the companies that are acquired by a Target Company and the Time of Acquisition.
  ☆26Updated 3 years ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆48Updated 2 years ago
• 0xAgun / All1
  Automated Recon Tool Installer
  ☆16Updated 3 years ago
• YouGina / wordlistweaver
  Quick tool to create custom wordlists like how fuzzers work
  ☆10Updated last year
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆58Updated 3 years ago
• bbhunter / attack-tools
  A set of tools, procedures, and playbooks for performing bug bounties
  ☆16Updated 6 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 3 years ago
• abdallaabdalrhman / Wordlist-for-Bug-Bounty
  I collected it to help the bug hunter get a reward
  ☆58Updated 2 years ago
• SirBugs / JsValidator
  JsValidator is a tool created for validating the JS files after crawlling it from waybackurls
  ☆20Updated 2 years ago
• MShahine / Bug-Bounty-Recon
  All The Notes And Tips I FOund In Github And Twitter I Put Them Here
  ☆35Updated 4 years ago
• aliyugombe / reflector
  ☆15Updated 2 years ago
• Sybil-Scan / TLDbrute
  A simple utility to generate domain names with all possible TLDs
  ☆23Updated 2 years ago
• notmarshmllow / credax
  Credax - Fuzzing Tool with Slack Notifications. Also removes false positive responses.
  ☆10Updated 3 years ago
• osamahamad / Sensitive-Data-Exposures-with-Github
  Techniques / Tips and tricks for finding sensitive data exposures in Github for Penetration Testers / Bug Bounty Hunters
  ☆17Updated 5 years ago
• rook1337 / hakrawlerx8chain
  ☆14Updated 4 years ago
• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆42Updated 4 years ago
• Virdoexhunter / Subenum_deep_subdomain_enumeration
  In this repo, I have created a subdomain enumeration function that grab subdomains in deep.
  ☆22Updated 2 years ago
• darklotuskdb / SSTI-XSS-Finder
  XSS Finder Via SSTI
  ☆56Updated last year