Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic intact. It applies user-defined replace rules, removes authentication artefacts for unauthenticated probes, and highlights noteworthy responses so you can quickly spot interesting behaviour.
☆16Oct 7, 2026Updated 3 weeks ago
Alternatives and similar repositories for AuthMutator
Users that are interested in AuthMutator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- bug bounty automation☆14Jul 2, 2021Updated 5 years ago
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- Tool for scope management☆10Jun 8, 2022Updated 4 years ago
- A simple plugin to export JS files from one or multiple targets☆48Nov 12, 2023Updated 2 years ago
- certinfo is a powerful SSL certificate scraping tool that extracts domain names from SSL certificates of arbitrary hosts. It supports bot…☆11Nov 23, 2025Updated 11 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Hidden input parameters finder☆18Jul 10, 2023Updated 3 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- ADS (Apparition Delivery System) is a research framework for exploring stealthy Windows execution techniques using filesystem artifacts t…☆13Mar 15, 2026Updated 7 months ago
- A high-performance technology detection tool built with Go, leveraging the projectdiscovery wappalyzergo library to identify web technolo…☆15Oct 5, 2026Updated 3 weeks ago
- ☆12Jun 12, 2026Updated 4 months ago
- Generates permutations, alterations and mutations of subdomains. Auto Resolve what we find.☆11Dec 8, 2020Updated 5 years ago
- A python-based vulnerability scanner designed to identify open redirect flaws in website applications.☆26Mar 15, 2026Updated 7 months ago
- ☆13Oct 24, 2024Updated 2 years ago
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆22Aug 25, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆18Jan 13, 2025Updated last year
- A BurpSuite extension that allows you to use Chromium with PwnFox☆56Aug 2, 2026Updated 2 months ago
- A Burp Extension to test applications for vulnerability to the Web Cache Deception attack☆35Nov 23, 2017Updated 8 years ago
- 零零信安api信息系统查询脚本☆11Sep 22, 2023Updated 3 years ago
- A powerful JavaScript monitoring tool for bug bounty hunters. Track changes in JavaScript files across websites, detect new attack surfac…☆88Apr 19, 2025Updated last year
- WordTally is a Python script designed to analyze text files and provide word frequency statistics.☆15Jul 3, 2023Updated 3 years ago
- ☆29Feb 28, 2026Updated 8 months ago
- ☆13Aug 29, 2025Updated last year
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆10Jul 30, 2018Updated 8 years ago
- n8n workflows related to bug bounty☆48Oct 27, 2025Updated last year
- Hunt down social media accounts by username across social networks using httpx☆18Nov 6, 2025Updated 11 months ago
- A tool for sorting blocks of lines☆36Oct 4, 2022Updated 4 years ago
- ScriptCase Pre-Authenticated Remote Command Execution exploitation script (CVE-2025-47227, CVE-2025-47228).☆12May 14, 2025Updated last year
- ☆25Mar 3, 2020Updated 6 years ago
- This script is used to search for cloud certificate entities such as Amazon, Azure, and others that have been extracted by the kaeferjaeg…☆56Nov 21, 2025Updated 11 months ago
- A modern postMessage tracker including additional features, inspired by Frans Rosens postmessage tracker. A port of chrome Manifest V3 "F…☆63Sep 12, 2025Updated last year
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆17Sep 23, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.☆10Apr 8, 2024Updated 2 years ago
- Enhanced 403 bypass header☆21Sep 12, 2022Updated 4 years ago
- A Burp Suite extension that helps track and manage multiple sessions simultaneously by color-coding HTTP requests based on custom pattern…☆28Nov 21, 2024Updated last year
- Burp Extension for a passive scanning JS files for endpoint links.☆57Nov 20, 2024Updated last year
- Command line interface for Jsmon Security Platform☆34Jul 31, 2026Updated 2 months ago
- TLDFinder is a Python package that identifies valid top-level domains (TLDs) for a list of domains with wildcard characters in the TLD.☆23Jul 2, 2023Updated 3 years ago
- This suite automates Android app pentesting and reverse engineering tasks. It provides a menu-driven interface for installing tools, mana…☆12Jan 12, 2026Updated 9 months ago