Checks for SSRF using built-in custom Payloads after fetching URLs from Multiple Passive Sources & applying complex patterns aimed at SSRF
☆133Jul 23, 2026Updated 3 weeks ago
Alternatives and similar repositories for SSRFPwned
Users that are interested in SSRFPwned are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Nucleimonst3r is a powerful vulnerability scanner that can help Bug Bounty Hunters find low hanging fruit vulnerabilities for known CVEs …☆263Jul 23, 2026Updated 3 weeks ago
- ScopeHunter is a command-line tool for finding in scope targets for bug bounty programs.☆77Jul 23, 2026Updated 3 weeks ago
- A Tool for Bug Bounty Hunters that uses Passive and Active Techniques to fetch URLs as a strong Recon, so you can then create Attack Vect…☆76Jul 23, 2026Updated 3 weeks ago
- A 1 Liner SQL Injection Attack using SQLMAP and various parameters that helps quickly check for a vulnerabilities during Bug Bounty☆42Sep 6, 2024Updated last year
- Dump Windows SAM hashes☆43Aug 9, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This bash script tool, will perform advanced subdomain enumeration, save the results, it will then probe the subdomains into urls, save t…☆27Sep 6, 2024Updated last year
- TerminatorZ is a highly sophisticated and efficient Offensive CVE Exploitation Framework that scans for top potential vulnerabilities wit…☆333Jul 23, 2026Updated 3 weeks ago
- XSSRocket it is a tool designed for offensive security and XSS (Cross-Site Scripting) attacks.☆168Jul 23, 2026Updated 3 weeks ago
- Simple-XSS is a multiplatform cross-site scripting (XSS) vulnerability exploitation tool.☆49Jul 2, 2025Updated last year
- Hello Hackers ! , Shigaraki tool is all in one for finding specially admin panels , login panels from all subdomains .☆15Jul 1, 2025Updated last year
- Convert domain lists to resolved IP without duplicated, useful for strong large recon, and Bug Bounty☆14Apr 30, 2021Updated 5 years ago
- ScanExp automates the scanning of any machine's open ports via the ip address and performs a brute force attack on ports 20, 21 for the F…☆27Oct 14, 2023Updated 2 years ago
- Powershell shellcode one-liner. Powershell免杀一句话上线器便捷生成☆54Aug 13, 2023Updated 3 years ago
- SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. I…☆163Jul 23, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An AIO Tool to check for Vulnerable Amazon S3 Buckets as part of Bug Bounty, the uniqueness of this tool is that it can take a file full …☆46Sep 6, 2024Updated last year
- LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion (LFI) vulnerabilities☆303Jan 7, 2024Updated 2 years ago
- SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accu…☆250Jul 23, 2026Updated 3 weeks ago
- ☆14Dec 21, 2023Updated 2 years ago
- It is a tool for scanning and exploiting the famous SQL injection vulnerability in more than millions of sites. The exploit was programme…☆67Jul 1, 2024Updated 2 years ago
- ☆56Apr 25, 2023Updated 3 years ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆48Mar 4, 2024Updated 2 years ago
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. Th…☆266May 17, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embed…☆111Dec 8, 2025Updated 8 months ago
- an exploit of Server-side request forgery (SSRF)☆56Aug 2, 2024Updated 2 years ago
- it is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web pag…☆119Jul 18, 2023Updated 3 years ago
- Mine URLs from Browser's Heap Snapshot for fun and profit☆66Aug 9, 2023Updated 3 years ago
- NetFuzzer is a comprehensive network security assessment tool for internal and external network components, including Host Machines, Fire…☆16Aug 4, 2025Updated last year
- Black Hat Ethical Hacking - Official Theme for Conky Manager☆18Sep 6, 2024Updated last year
- An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component☆11Aug 5, 2023Updated 3 years ago
- A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers☆359Dec 14, 2023Updated 2 years ago
- Duplicate not owned Token from Running Process☆74Jul 21, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Subdomain Bruteforce - Bounty Quick Code☆32Jul 23, 2026Updated 3 weeks ago
- Template Nuclei SSTI☆34Nov 18, 2025Updated 8 months ago
- CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based t…☆134Mar 3, 2026Updated 5 months ago
- This script demonstrates a time-based blind SQL injection on Moodle platforms, exploiting response delays to extract data.☆22Jul 7, 2024Updated 2 years ago
- Determine privileges from cloud credentials via brute-force testing.☆69Jul 25, 2026Updated 2 weeks ago
- masscan with exclusive excludes☆61Nov 8, 2023Updated 2 years ago
- Smart context-based SSRF vulnerability scanner.☆364May 5, 2022Updated 4 years ago