darklotuskdb / SSTI-XSS-Finder
XSS Finder Via SSTI
☆56Updated last year
Alternatives and similar repositories for SSTI-XSS-Finder:
Users that are interested in SSTI-XSS-Finder are comparing it to the libraries listed below
- ☆42Updated 3 years ago
- Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI☆27Updated 4 years ago
- ☆21Updated 2 years ago
- a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …☆49Updated 3 years ago
- Supertruder but better☆32Updated 2 years ago
- All The Notes And Tips I FOund In Github And Twitter I Put Them Here☆34Updated 4 years ago
- A repo for tools, utils, and wrappers that are to small to put in their own repo.☆23Updated 2 years ago
- Cool HackerOne Reports☆21Updated 2 years ago
- A solid recon tool I use personally.☆30Updated last year
- Find CVEs that don't have a Detectify modules.☆21Updated 2 years ago
- ☆13Updated 3 years ago
- Extract endpoints marked as disallow in robots files to generate wordlists.☆57Updated 3 years ago
- SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.☆38Updated 4 years ago
- JSNotify is a Python script designed to monitor JavaScript files in a specified directory for changes. This tool can be used by developer…☆18Updated last year
- ☆10Updated 2 years ago
- A Burp Extension that makes it easier to view all script code on a Response.☆16Updated last year
- A very simple AEM detector written in rust.🦀☆19Updated last year
- Enhanced 403 bypass header☆21Updated 2 years ago
- ☆12Updated 3 years ago
- A simple utility to generate domain names with all possible TLDs☆23Updated 2 years ago
- ☆37Updated last year
- Tool for testing reflections in the HTTP responses☆60Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆16Updated 4 years ago
- Alternative to XSS Hunter for blind XSS.☆51Updated 2 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆58Updated 2 years ago
- IIS shortname scanner + bruteforce☆52Updated last year
- Brute Force subdomains with a list of custom DNS records.☆13Updated 2 years ago
- JsValidator is a tool created for validating the JS files after crawlling it from waybackurls☆19Updated 2 years ago
- Automated blind-xss search for Burp Suite☆23Updated 3 years ago
- Script for Reconnaissance(Bug Bounty)☆18Updated 2 years ago