A blind XSS detection and XSS data capture framework
☆177Dec 6, 2025Updated 7 months ago
Alternatives and similar repositories for XSS-Catcher
Users that are interested in XSS-Catcher are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆297Sep 22, 2024Updated last year
- Saves pages to Wayback machine☆12Dec 2, 2024Updated last year
- ☆59Apr 8, 2021Updated 5 years ago
- The Serverless Blind XSS App☆338Mar 28, 2026Updated 3 months ago
- ☆18Apr 7, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.☆134Jul 11, 2021Updated 4 years ago
- Endpoint monitor tool☆21Sep 16, 2020Updated 5 years ago
- Gotator is a tool to generate DNS wordlists through permutations.☆525Jul 17, 2022Updated 3 years ago
- Fast AEM scope gathering tool for all your public and private BugCrowd Programs☆10Jul 14, 2021Updated 4 years ago
- Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]☆29Jan 6, 2021Updated 5 years ago
- Web cache poisoning vulnerability scanner.☆74May 5, 2022Updated 4 years ago
- automated web assets enumeration & scanning [DEPRECATED]☆288Mar 7, 2023Updated 3 years ago
- A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆28Dec 9, 2024Updated last year
- Discover new target domains using Content Security Policy☆516Jun 23, 2026Updated 2 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Looks for parameters in urls☆35Oct 14, 2024Updated last year
- Automation for javascript recon in bug bounty.☆1,093Sep 9, 2023Updated 2 years ago
- BugBounty , sort and delete duplicates param value without missing original value☆22Jul 31, 2021Updated 4 years ago
- Signatures for jaeles scanner by @j3ssie☆117Apr 20, 2024Updated 2 years ago
- A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bul…☆96Jul 10, 2021Updated 4 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆65Apr 17, 2020Updated 6 years ago
- Electron JS Browser To Find XSS Vulnerabilities Automatically☆748Mar 30, 2021Updated 5 years ago
- Bugbounty scope tool☆329Mar 5, 2025Updated last year
- Hidden parameters discovery suite☆225Nov 14, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Urls de-duplication tool for better recon.☆145Apr 13, 2026Updated 2 months ago
- Extract endpoints marked as disallow in robots files to generate wordlists.☆59Mar 2, 2022Updated 4 years ago
- Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…☆413Nov 24, 2020Updated 5 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆519Jun 22, 2022Updated 4 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆158Nov 24, 2023Updated 2 years ago
- A simple tool which makes creating nuclei templates even easier.☆37Jun 23, 2024Updated 2 years ago
- Find endpoints on GitHub.☆219Mar 28, 2023Updated 3 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,044Jun 6, 2026Updated last month
- Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …☆150Apr 12, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆668Aug 28, 2025Updated 10 months ago
- ☆38Nov 27, 2020Updated 5 years ago
- tool that generates bypasses for open redirects☆51Apr 18, 2022Updated 4 years ago
- ☆32Jun 27, 2022Updated 4 years ago
- Finding XSS during recon☆270Sep 13, 2022Updated 3 years ago
- Tips For Bug Bounty Hunters☆86Jul 16, 2022Updated 3 years ago
- Hidden parameters discovery suite☆2,074Sep 8, 2024Updated last year