An extension to find callback endpoints in the background while searching the Web
☆48Mar 26, 2026Updated 6 months ago
Alternatives and similar repositories for CallMe
Users that are interested in CallMe are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2…☆70Sep 18, 2026Updated last month
- A Caido plugin to monitor, intercept, and debug JavaScript sinks based on customizable configurations.☆52Apr 8, 2026Updated 6 months ago
- ☆51Aug 2, 2025Updated last year
- jxscout superpowers JavaScript analysis for security researchers☆468Apr 12, 2026Updated 6 months ago
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆21Mar 12, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for …☆17Apr 1, 2025Updated last year
- Fuzzing Infrastructure using afl++ for coverage guided fuzzing including triaging and live dashboard.☆50Jul 23, 2026Updated 3 months ago
- Improve automated and semi-automated active scanning in Burp Pro☆12Jun 13, 2025Updated last year
- Chrome extension for automating CSPT discovery☆165May 12, 2026Updated 5 months ago
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆298Oct 5, 2024Updated 2 years ago
- Ethiack AI Pentesting Benchmark Framework☆107Aug 20, 2026Updated 2 months ago
- Repo containing walkthroughs to possibly pwn Admin Panels and Exposed Consoles☆17Sep 20, 2024Updated 2 years ago
- HTTP testing platform for security researchers☆47Aug 21, 2026Updated 2 months ago
- Convert HTTP requests into API spec☆14Feb 14, 2026Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A modern postMessage tracker including additional features, inspired by Frans Rosens postmessage tracker. A port of chrome Manifest V3 "F…☆63Sep 12, 2025Updated last year
- Code for our 2023 IEEE S&P Paper "The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web"☆16Jul 16, 2026Updated 3 months ago
- ☆28Dec 20, 2022Updated 3 years ago
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage…☆133Sep 12, 2025Updated last year
- This repository is a collection of JavaScript gadgets that can be used to bypass XSS mitigations such as Content Security Policy (CSP) an…☆153Feb 4, 2026Updated 8 months ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,385Aug 7, 2025Updated last year
- PP-finder Help you find gadget for prototype pollution exploitation☆209May 15, 2026Updated 5 months ago
- A playground to practice SSRF Attacks against web apps☆17Oct 15, 2018Updated 8 years ago
- xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and …☆30May 23, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 🤹 Caido AI Skills☆283Aug 13, 2026Updated 2 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- MCP server that connects AI assistants to HackerOne for bug bounty hunting☆355Oct 13, 2026Updated last week
- A powerful Chrome extension for detecting and analyzing React Server Components (RSC) and Next.js App Router vulnerabilities☆16Sep 29, 2026Updated 3 weeks ago
- Codex-style /goal command for Claude Code☆113May 8, 2026Updated 5 months ago
- web app monitoring automation☆15Jan 7, 2025Updated last year
- A Fuzzing skill based on purely what i know.☆43Jun 3, 2026Updated 4 months ago
- FetchDiff is a tool to monitor remote JavaScript and web pages for changes.☆25Sep 27, 2026Updated 3 weeks ago
- Search for secrets inside user data attached to EC2 instances on multiple AWS accounts☆16Jun 19, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- AWS S3 Bucket Finder.☆14Oct 28, 2025Updated 11 months ago
- CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scr…☆720Sep 30, 2026Updated 3 weeks ago
- ☆13Updated this week
- a tool that compiles a csv of all h1 program stats☆50Jul 2, 2023Updated 3 years ago
- A tool for monitoring bug bounty programs across multiple platforms to track scope changes.☆35Sep 24, 2026Updated last month
- ☆50Aug 17, 2026Updated 2 months ago
- A Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server respo…☆12Sep 20, 2026Updated last month