Alternatives and similar repositories for SSTI-XSS-Finder

Users that are interested in SSTI-XSS-Finder are comparing it to the libraries listed below

• vikrantbatra05 / HuntTheBug
  Basic Recon For Bug Bounty Hunter - "HuntTheBug" is Basic Scripts For Sub Domain Enumeration> Live Domain Enumeration > Sub Domain Hijack…
  ☆55Updated 3 years ago
• R0X4R / ssrf-tool
  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.
  ☆45Updated 4 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 3 years ago
• hakluke / hakfindinternaldomains
  Feed it a list of subdomains, it will resolve them and tell you which ones are internal
  ☆93Updated 3 years ago
• abdallaabdalrhman / Wordlist-for-Bug-Bounty
  I collected it to help the bug hunter get a reward
  ☆58Updated 3 years ago
• Dheerajmadhukar / karma_v1
  KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…
  ☆59Updated 4 years ago
• ExpLangcn / agartha
  a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …
  ☆49Updated 3 years ago
• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆44Updated 4 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• HernanRodriguez1 / ScanMySQLiErrorBased-Nuclei
  ☆21Updated 3 years ago
• rkpr0xy13 / recon-boot.sh
  Script for Reconnaissance(Bug Bounty)
  ☆18Updated 3 years ago
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆26Updated 4 years ago
• emadshanab / Extract-and-Probe-all-the-ips-associated-with-same-host-via-httpx
  ☆13Updated 3 years ago
• ethicalhackingplayground / aem-eye
  A very simple AEM detector written in rust.🦀
  ☆20Updated 2 years ago
• tamimhasan404 / Gau-Expose
  It grep subdomains, email/username, build custom wordlist etc from gau results
  ☆48Updated 2 years ago
• eslam3kl / ShoLister
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆61Updated 3 years ago
• ElSicarius / Supp-truder
  Supertruder but better
  ☆31Updated 2 years ago
• akshaysharma016 / aem-detector
  ☆21Updated 2 years ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆59Updated 3 years ago
• NitinYadav00 / gf-patterns
  Some of the gf patterns which i use
  ☆45Updated 3 years ago
• tamimhasan404 / Open-Source-Nuclei-Templates-Downloader
  Script that download 37+ open source nuclei templates
  ☆44Updated 3 years ago
• BrownBearSec / Utils-and-Wrappers
  A repo for tools, utils, and wrappers that are to small to put in their own repo.
  ☆23Updated 2 years ago
• k4k4r07 / CertSubDumb
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆19Updated 3 years ago
• theVulnerableMMII / oSkan
  This tool is a simple LFI, RFI, RCE, and Joomla Components vulnerability scanner, created by JayCyberSecurity
  ☆22Updated 3 years ago
• six2dez / resolvers_reconftw
  Resolvers updated daily for reconftw
  ☆47Updated 2 years ago
• bsysop / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆17Updated 4 years ago
• SirBugs / JsValidator
  JsValidator is a tool created for validating the JS files after crawlling it from waybackurls
  ☆19Updated 2 years ago
• bp0lr / myGF_patterns
  ☆21Updated 4 years ago
• r00tkie / grep-pattern
  collection of various grep patterns collected from tomnomnom/gf and other places
  ☆23Updated 5 years ago