Alternatives and similar repositories for SSTI-XSS-Finder

Users that are interested in SSTI-XSS-Finder are comparing it to the libraries listed below

• emadshanab / Burp-Bounty-free-Profiles-Collection
  ☆42Updated 3 years ago
• lazyibrahim / JSNotify
  JSNotify is a Python script designed to monitor JavaScript files in a specified directory for changes. This tool can be used by developer…
  ☆18Updated last year
• bsysop / blind-ssrf-chains
  An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
  ☆17Updated 4 years ago
• akshaysharma016 / aem-detector
  ☆21Updated 2 years ago
• Ravaan21 / Chandrahasa
  A solid recon tool I use personally.
  ☆30Updated 2 years ago
• emadshanab / Extract-and-Probe-all-the-ips-associated-with-same-host-via-httpx
  ☆13Updated 3 years ago
• HernanRodriguez1 / ScanMySQLiErrorBased-Nuclei
  ☆21Updated 2 years ago
• emadshanab / femida
  Automated blind-xss search for Burp Suite
  ☆23Updated 3 years ago
• ExpLangcn / agartha
  a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to …
  ☆49Updated 3 years ago
• BrownBearSec / Utils-and-Wrappers
  A repo for tools, utils, and wrappers that are to small to put in their own repo.
  ☆23Updated 2 years ago
• R0X4R / ssrf-tool
  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.
  ☆44Updated 4 years ago
• emadshanab / Blind-xss-via-ffuf
  ☆12Updated 3 years ago
• akincibor / 403-bypass
  Enhanced 403 bypass header
  ☆21Updated 2 years ago
• Josue87 / roboxtractor
  Extract endpoints marked as disallow in robots files to generate wordlists.
  ☆57Updated 3 years ago
• Lu3ky13 / Authorization-Nuclei-Templates
  Authorization-Nuclei-Templates
  ☆39Updated 8 months ago
• ElSicarius / Supp-truder
  Supertruder but better
  ☆32Updated 2 years ago
• honoki / burp-copy-regex-matches
  Burp Suite plugin to copy regex matches from selected requests and/or responses to the clipboard.
  ☆34Updated 3 years ago
• Ravirajrao / HackerOne-Reports
  Cool HackerOne Reports
  ☆21Updated 2 years ago
• aniqfakhrul / lazyParam
  A simple automation tool to detect lfi, rce and ssti vulnerability
  ☆55Updated 3 years ago
• Dheerajmadhukar / subzzZ
  SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.
  ☆38Updated 4 years ago
• k4k4r07 / CertSubDumb
  Basic Bash Script to scrape all subdomains from crtsh in a single run
  ☆19Updated 3 years ago
• System00-Security / findbbprograms
  Check if domain has bug bounty program or not
  ☆27Updated last year
• xnl-h4ck3r / ScriptView-Burp-Extension
  A Burp Extension that makes it easier to view all script code on a Response.
  ☆16Updated last year
• Lu3ky13 / script-python-to-check-url-list-via-cookies-and-Authorization
  script python to check url list via cookies and Authorization
  ☆19Updated 2 years ago
• zeronine9 / Blind_SPOT
  Blind spot is a python tool for blind injection vulnerabilities , SQLi time based , Command injection , code injection , SSTI
  ☆27Updated 4 years ago
• z3dc0ps / BBSSRF
  BBSSRF - Bug Bounty SSRF is a powerful tool to check SSRF OOB connection
  ☆38Updated 2 years ago
• vitorfhc / queryxss
  Tool for testing reflections in the HTTP responses
  ☆60Updated last year
• MaakResearch / Recon
  About Recon Tools,Methodology and writeups
  ☆18Updated last year
• Sybil-Scan / TLDbrute
  A simple utility to generate domain names with all possible TLDs
  ☆23Updated 2 years ago
• tamimhasan404 / Open-Source-Nuclei-Templates-Downloader
  Script that download 37+ open source nuclei templates
  ☆43Updated 2 years ago