Vaf is a cross-platform very advanced and fast web fuzzer written in nim
☆318May 29, 2022Updated 4 years ago
Alternatives and similar repositories for vaf
Users that are interested in vaf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- grim reaper c2☆344Nov 19, 2022Updated 3 years ago
- Static code analysis tool based on Elasticsearch☆130Jan 23, 2021Updated 5 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- Hide your payload in DNS☆620May 3, 2023Updated 3 years ago
- Bugbounty scope tool☆331Mar 5, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This tool is useful to find a particular string in a list of URLs using tesseract's OCR (Optical Character Recognition) capabilities☆31Jan 17, 2022Updated 4 years ago
- 🐙 Cross-document messaging security research tool powered by https://enso.security☆309May 22, 2023Updated 3 years ago
- Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…☆408Nov 24, 2020Updated 5 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆520Jun 22, 2022Updated 4 years ago
- Site fast fuzzing with chorme extension.☆24Feb 4, 2022Updated 4 years ago
- A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets☆1,599Mar 8, 2026Updated 7 months ago
- ☆298Jul 16, 2022Updated 4 years ago
- Hidden parameters discovery suite☆222Nov 14, 2022Updated 3 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆429Oct 14, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A simple command line tool designed to explore the mechanics of dictionary attacks on the FTP protocol.☆20Jun 16, 2021Updated 5 years ago
- WRecon, is a tool for the recognition of vulnerabilities and blackbox information for wordpress.☆24Jun 5, 2026Updated 4 months ago
- WIP Post-exploitation framework tailored for hypervisors.☆51Nov 16, 2023Updated 2 years ago
- ☆749Jun 26, 2024Updated 2 years ago
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆183Nov 22, 2021Updated 4 years ago
- Automating XSS using Bash☆361Jan 27, 2026Updated 9 months ago
- Customisable and automated HTTP header injection☆298Jun 27, 2024Updated 2 years ago
- An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code …☆405Jan 22, 2025Updated last year
- Feed it a list of subdomains, it will resolve them and tell you which ones are internal☆92Nov 21, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Jeeves SQLI Finder☆214May 13, 2022Updated 4 years ago
- Little Bug Bounty & Hacking Tools⚔️☆399Updated this week
- Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules☆186Oct 30, 2021Updated 5 years ago
- Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for m…☆700Oct 29, 2021Updated 5 years ago
- A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering☆210Nov 29, 2020Updated 5 years ago
- client-side prototype pullution vulnerability scanner☆46Aug 23, 2021Updated 5 years ago
- Small python script to look for common vulnerabilities on SMTP server.☆46Dec 17, 2023Updated 2 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,109Aug 5, 2026Updated 2 months ago
- Static and dynamic Android application security analysis☆78Jun 2, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆12Sep 22, 2022Updated 4 years ago
- The Swiss Army knife for automated Web Application Testing☆2,384Jun 20, 2026Updated 4 months ago
- Made your bugbounty subdomains reconnaissance easier with Hunt3r the web application reconnaissance framework☆171Feb 4, 2023Updated 3 years ago
- This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.☆75Nov 5, 2020Updated 5 years ago
- Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!☆387Jun 7, 2023Updated 3 years ago
- (kinda) Malicious Outlook Reader☆137Mar 3, 2021Updated 5 years ago
- DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it☆453Jan 9, 2024Updated 2 years ago