d0ge / sign-saboteur
SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
☆157Updated 5 months ago
Alternatives and similar repositories for sign-saboteur:
Users that are interested in sign-saboteur are comparing it to the libraries listed below
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…☆158Updated 5 months ago
- The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.☆84Updated last year
- A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery☆302Updated 5 months ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆255Updated 11 months ago
- Unsecure time-based secret exploitation and Sandwich attack implementation Resources☆134Updated 4 months ago
- Search for sensitive data in Postman public library.☆204Updated 4 months ago
- BChecks collection for Burp Suite Professional☆97Updated 11 months ago
- ☆168Updated 8 months ago
- Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the int…☆128Updated 4 months ago
- A streamlined tool for discovering private TLDs for security research.☆191Updated last week
- The Most Advanced Client-Side Prototype Pollution Scanner☆220Updated 2 weeks ago
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆116Updated last month
- Custom scan profiles for use with Burp Suite Pro☆142Updated last year
- ☆199Updated 11 months ago
- CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.☆139Updated 10 months ago
- ☆175Updated 6 months ago
- ☆139Updated last year
- jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice☆272Updated last year
- Burp Extension to add additional functionality for pentesting websocket based applications☆93Updated 10 months ago
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆175Updated 3 months ago
- Session Hijacking Visual Exploitation☆198Updated last year
- Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀☆87Updated this week
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆261Updated last month
- A GraphQL enumeration and extraction tool☆131Updated 2 years ago
- unleashed ffuf☆112Updated 10 months ago
- MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.☆172Updated 7 months ago
- jxscout superpowers JavaScript analysis for security researchers☆101Updated this week
- Enumerate / Dump Docker Registry☆175Updated last year
- TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…☆351Updated 5 months ago
- ☆131Updated 5 months ago