Morgan is a powerful tool designed to help security researchers, developers, and security auditors identify sensitive information, vulnerabilities, and potential risks within JavaScript files on websites.
☆57Feb 2, 2025Updated last year
Alternatives and similar repositories for Morgan
Users that are interested in Morgan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Nov 8, 2024Updated last year
- Grep subdomains from web pages.☆42Feb 10, 2025Updated last year
- This tools used for Automating finding of subdomain, and checking for alive subdomain, and gathering js files from all the subdomain and …☆23Jun 28, 2024Updated 2 years ago
- Tool for checking reflecting Parameters in a URL.☆10Aug 31, 2020Updated 5 years ago
- SubCerts is a simple tool that uses certificate transparency logs (via crt.sh) to extract subdomains of a given domain.☆75Jan 6, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Chrome DevTools HTTP workbench with built-in AI.☆19Dec 9, 2025Updated 7 months ago
- Vite Arbitrary File Read Exploit☆15Jun 25, 2025Updated last year
- Passive Web Vulnerability Detection Tool☆38May 5, 2025Updated last year
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆314Mar 31, 2024Updated 2 years ago
- LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs☆237Apr 5, 2025Updated last year
- Collection of templates from various resources☆46Jun 17, 2026Updated last month
- Passive JavaScript reconnaissance for penetration testers — bridging Burp Suite traffic into structured, AST-based analysis in VSCode.☆36Feb 5, 2026Updated 5 months ago
- A passive way to find backups/ sensitive information.☆94Jul 10, 2025Updated last year
- A curated list of MCP servers for bug bounty.☆65Oct 6, 2025Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆52Nov 19, 2025Updated 8 months ago
- SubOwner - A Simple tool check for subdomain takeovers.☆122Oct 18, 2024Updated last year
- Burp extension used to snip any header from all the requests.☆25Nov 12, 2023Updated 2 years ago
- IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applicatio…☆238Sep 25, 2025Updated 9 months ago
- A Burp Extension that makes it easier to view all script code on a Response.☆18Nov 12, 2023Updated 2 years ago
- This script checks the status of URLs to see if they are alive or not.☆13Nov 22, 2024Updated last year
- reverse engineered and improved BSQLi script from Coffinxp☆14Aug 30, 2024Updated last year
- alternative to procdump☆11May 26, 2021Updated 5 years ago
- Khonsu is a powerful port scanning tool written in python that detect open ports with concurrent and accurately☆16Oct 8, 2025Updated 9 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆27May 21, 2025Updated last year
- CVE-2025-4123 - Grafana Tool☆32Jun 4, 2025Updated last year
- CVE-2025-0133 GlobalProtect XSS☆21Jun 17, 2025Updated last year
- Backup Files Wordlist Generator - generate a comprehensive list of potential backup file Wordlist based on a given list URL and backup fi…☆94Jun 23, 2025Updated last year
- ☆102Apr 4, 2025Updated last year
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆36Jan 31, 2026Updated 5 months ago
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆300Oct 5, 2024Updated last year
- crawler for finding reflected parameters and reflecting special characters!☆21Dec 2, 2024Updated last year
- web cache poison - Top 1 web hacking technique of 2019☆24Feb 24, 2020Updated 6 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆47Mar 7, 2025Updated last year
- NetFuzzer is a comprehensive network security assessment tool for internal and external network components, including Host Machines, Fire…☆16Aug 4, 2025Updated 11 months ago
- Small script to check a list of domains against open redirect vulnerability☆30Jan 22, 2022Updated 4 years ago
- CVE-2025-5777 Citrix NetScaler Memory Leak Exploit (CitrixBleed 2)☆30Jul 11, 2025Updated last year
- dnsprober is a fast and multipurpose DNS reconnaissance tool designed for efficient DNS probing and enumeration. It supports multiple DNS…☆36Jun 23, 2025Updated last year
- A Bash script for automated nuclei dast scanning by using passive urls☆131Mar 5, 2025Updated last year
- ☆15Mar 21, 2025Updated last year