Alternatives and similar repositories for headerpwn

Users that are interested in headerpwn are comparing it to the libraries listed below

• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆299Updated 2 years ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆398Updated 3 weeks ago
• zzzteph / sheye
  Opensource assets and vulnerability scanning tool
  ☆187Updated 7 months ago
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆255Updated 11 months ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆382Updated 2 years ago
• edoardottt / pphack
  The Most Advanced Client-Side Prototype Pollution Scanner
  ☆241Updated last week
• sw33tLie / uff
  unleashed ffuf
  ☆233Updated 2 months ago
• sysdig / wafer
  ☆220Updated last year
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆330Updated last year
• SirBugs / endext
  EndExt is a .go tool for extracting all the possible endpoints from the JS files
  ☆219Updated last year
• RikunjSindhwad / Task-Ninja
  Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
  ☆154Updated 3 months ago
• SAPT01 / HBSQLI
  Automated Tool for Testing Header Based Blind SQL Injection
  ☆320Updated 2 years ago
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆499Updated last week
• cosad3s / postleaks
  Search for sensitive data in Postman public library.
  ☆213Updated 4 months ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆453Updated 3 years ago
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆378Updated last year
• e1abrador / sub.Monitor
  Self-hosted passive subdomain continous monitoring tool.
  ☆171Updated last year
• zh1tro / LEAKEY
  LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and e…
  ☆380Updated 2 years ago
• BountySecurity / gbounty
  GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identif…
  ☆158Updated 4 months ago
• pikpikcu / nodesub
  Nodesub is a command-line tool for finding subdomains in bug bounty programs
  ☆148Updated last year
• Alevsk / rmm
  Recon MindMap (RMM)
  ☆168Updated last year
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆233Updated this week
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆362Updated 3 years ago
• SeifElsallamy / Blind-XSS-Manager
  Never forget where you inject.
  ☆297Updated 4 months ago
• carlospolop / fuzzhttpbypass
  This tool use fuuzzing to try to bypass unknown authentication methods, who knows...
  ☆255Updated last year
• shreyaschavhan / advanced-sql-injection-for-awae
  ☆203Updated 11 months ago
• Moopinger / smugglefuzz
  A rapid HTTP downgrade smuggling scanner written in Go.
  ☆310Updated last year
• codingo / dorky
  A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon
  ☆246Updated 2 years ago
• az7rb / crt.sh
  Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.
  ☆258Updated last year
• TheGetch / Burp-Suite-Pro-Scan-Profiles
  Custom scan profiles for use with Burp Suite Pro
  ☆148Updated last year