Alternatives and similar repositories for badsecrets

Users that are interested in badsecrets are comparing it to the libraries listed below

• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆330Updated 9 months ago
• waf-bypass-maker / waf-community-bypasses
  ☆541Updated last year
• luigigubello / PayloadsAllThePDFs
  PDF Files for Pentesting
  ☆653Updated last year
• p0dalirius / ApacheTomcatScanner
  A python script to scan for Apache Tomcat server vulnerabilities.
  ☆865Updated 3 weeks ago
• projectdiscovery / fuzzing-templates
  Community curated list of nuclei templates for finding "unknown" security vulnerabilities.
  ☆76Updated last year
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆702Updated last month
• bitquark / shortscan
  An IIS short filename enumeration tool
  ☆1,018Updated 11 months ago
• p0dalirius / webapp-wordlists
  This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contai…
  ☆527Updated 10 months ago
• n0kovo / n0kovo_subdomains
  An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.
  ☆695Updated 2 years ago
• trufflesecurity / xsshunter
  ☆514Updated 2 weeks ago
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆362Updated 3 years ago
• irsl / curlshell
  reverse shell using curl
  ☆461Updated last year
• dhmosfunk / CVE-2023-25690-POC
  CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request …
  ☆283Updated last year
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆382Updated 5 months ago
• musana / fuzzuli
  fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
  ☆920Updated 2 years ago
• projectdiscovery / alterx
  Fast and customizable subdomain wordlist generator using DSL
  ☆874Updated last month
• mdsecresearch / BurpSuiteSharpener
  ☆524Updated 2 years ago
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆683Updated last year
• carlospolop / CloudPEASS
  ☆573Updated 2 months ago
• CravateRouge / autobloody
  Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound
  ☆614Updated last week
• AggressiveUser / AllForOne
  AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,
  ☆714Updated last year
• sAjibuu / Upload_Bypass
  A simple tool for bypassing file upload restrictions.
  ☆877Updated last year
• hoodoer / JS-Tap
  JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the target…
  ☆390Updated 5 months ago
• intrudir / BypassFuzzer
  Fuzz 401/403/404 pages for bypasses
  ☆343Updated 10 months ago
• laluka / bypass-url-parser
  bypass-url-parser
  ☆1,094Updated last week
• 0xKayala / NucleiScanner
  NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications
  ☆334Updated 7 months ago
• doyensec / Session-Hijacking-Visual-Exploitation
  Session Hijacking Visual Exploitation
  ☆208Updated last year
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆357Updated 3 years ago
• volkandindar / agartha
  A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violati…
  ☆384Updated last month
• attacksurge / ax
  The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning—On Your Terms. Easily distribute arbit…
  ☆638Updated last month