A blind XSS detection and XSS data capture framework
☆177Sep 4, 2026Updated last month
Alternatives and similar repositories for XSS-Catcher
Users that are interested in XSS-Catcher are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Saves pages to Wayback machine☆13Dec 2, 2024Updated last year
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆295Sep 22, 2024Updated 2 years ago
- ☆61Apr 8, 2021Updated 5 years ago
- The Serverless Blind XSS App☆339Mar 28, 2026Updated 6 months ago
- ☆16Apr 7, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Gotator is a tool to generate DNS wordlists through permutations.☆536Jul 17, 2022Updated 4 years ago
- Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.☆133Jul 11, 2021Updated 5 years ago
- Web cache poisoning vulnerability scanner.☆78May 5, 2022Updated 4 years ago
- Endpoint monitor tool☆21Sep 16, 2020Updated 6 years ago
- Fast AEM scope gathering tool for all your public and private BugCrowd Programs☆10Jul 14, 2021Updated 5 years ago
- Bugbounty utility to store list of enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]☆29Jan 6, 2021Updated 5 years ago
- automated web assets enumeration & scanning [DEPRECATED]☆288Mar 7, 2023Updated 3 years ago
- Automation for javascript recon in bug bounty.☆1,109Sep 9, 2023Updated 3 years ago
- A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆28Dec 9, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Discover new target domains using Content Security Policy☆531Updated this week
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Sep 7, 2026Updated last month
- Find endpoints on GitHub.☆227Mar 28, 2023Updated 3 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆518Jun 22, 2022Updated 4 years ago
- BugBounty , sort and delete duplicates param value without missing original value☆22Jul 31, 2021Updated 5 years ago
- Signatures for jaeles scanner by @j3ssie☆115Apr 20, 2024Updated 2 years ago
- A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bul…☆96Jul 10, 2021Updated 5 years ago
- Electron JS Browser To Find XSS Vulnerabilities Automatically☆746Mar 30, 2021Updated 5 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆63Apr 17, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Host Header Injection Checker☆86Mar 2, 2022Updated 4 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- Bugbounty scope tool☆331Mar 5, 2025Updated last year
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆675Aug 28, 2025Updated last year
- Urls de-duplication tool for better recon.☆145Apr 13, 2026Updated 6 months ago
- Extract endpoints marked as disallow in robots files to generate wordlists.☆59Mar 2, 2022Updated 4 years ago
- Hidden parameters discovery suite☆2,097Sep 8, 2024Updated 2 years ago
- Hidden parameters discovery suite☆224Nov 14, 2022Updated 3 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,051Jun 6, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security prof…☆410Nov 24, 2020Updated 5 years ago
- A simple tool which makes creating nuclei templates even easier.☆36Jun 23, 2024Updated 2 years ago
- Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.☆61Jan 22, 2023Updated 3 years ago
- Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …☆149Apr 12, 2024Updated 2 years ago
- ☆38Nov 27, 2020Updated 5 years ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,537Jan 8, 2026Updated 9 months ago
- Finding XSS during recon☆272Sep 13, 2022Updated 4 years ago