detectify / ugly-ducklingLinks
Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules
☆187Updated 4 years ago
Alternatives and similar repositories for ugly-duckling
Users that are interested in ugly-duckling are comparing it to the libraries listed below
Sorting:
- Weaponizing Live CT logs for automated monitoring of assets☆134Updated 4 years ago
- Adds a customizable "Send to..."-context-menu to your BurpSuite.☆163Updated 3 years ago
- ☆68Updated 3 years ago
- ASN reconnaissance script☆131Updated last year
- DNS and Target HTTP History Local Storage and Search☆63Updated 4 years ago
- Prototype pollution scanner using headless chrome☆219Updated 3 years ago
- ☆72Updated 5 years ago
- ☆105Updated 5 years ago
- A blazing fast & feature rich Amazon S3 bucket enumerator.☆98Updated 3 years ago
- Cross Origin Resource Sharing MisConfiguration Scanner☆174Updated 4 years ago
- GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…☆206Updated 2 years ago
- GraphQL security testing tool☆126Updated 3 years ago
- An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.☆218Updated 5 years ago
- ☆76Updated 5 years ago
- The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources☆136Updated 5 years ago
- Scripts to help with different ffuf tasks and workflows☆223Updated 2 years ago
- A collection of code for interacting with API sources directly to improve your understanding of those services.☆66Updated 5 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆93Updated 6 months ago
- A Burp Suite Extension for parsing Project Files from the CLI.☆87Updated 2 weeks ago
- Clientside vulnerability / reflected xss fuzzer☆149Updated 2 years ago
- Python utility to takeover domains vulnerable to AWS NS Takeover☆87Updated 2 years ago
- A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or L…☆131Updated 4 years ago
- A reverse whois tool based on Whoxy API.☆168Updated last year
- xss development frameworks, with the goal of making payload writing easier.☆153Updated last year
- Pentesting/Bugbounty Dockerfiles.☆176Updated 4 years ago
- Custom scripts for the PIPER Burp extensions.☆98Updated 2 years ago
- Searching for virtual hosts among non-resolvable domains☆88Updated 5 years ago
- GraphQL security workshop labs☆118Updated last week
- A simple way of sending messages from the CLI output to your Slack with webhook.☆116Updated 2 years ago
- A script that can resolve an input file of domains and scan them with masscan☆155Updated 5 years ago