Alternatives and similar repositories for headerpwn

Users that are interested in headerpwn are comparing it to the libraries listed below

• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆298Updated 2 years ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆382Updated 2 years ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆390Updated 6 months ago
• zzzteph / sheye
  Opensource assets and vulnerability scanning tool
  ☆185Updated 5 months ago
• edoardottt / pphack
  The Most Advanced Client-Side Prototype Pollution Scanner
  ☆242Updated last week
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆330Updated 11 months ago
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆253Updated 9 months ago
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆555Updated last year
• sw33tLie / uff
  unleashed ffuf
  ☆230Updated last month
• RikunjSindhwad / Task-Ninja
  Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
  ☆153Updated 2 months ago
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆374Updated last year
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆494Updated last week
• cosad3s / postleaks
  Search for sensitive data in Postman public library.
  ☆216Updated 3 months ago
• sysdig / wafer
  ☆218Updated last year
• e1abrador / sub.Monitor
  Self-hosted passive subdomain continous monitoring tool.
  ☆168Updated last year
• shreyaschavhan / advanced-sql-injection-for-awae
  ☆205Updated 10 months ago
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆226Updated last week
• SAPT01 / HBSQLI
  Automated Tool for Testing Header Based Blind SQL Injection
  ☆295Updated 2 years ago
• BountySecurity / gbounty
  GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identif…
  ☆155Updated 3 months ago
• d0ge / sign-saboteur
  SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
  ☆163Updated last year
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆713Updated last week
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆452Updated 3 years ago
• SeifElsallamy / Blind-XSS-Manager
  Never forget where you inject.
  ☆292Updated 3 months ago
• Moopinger / smugglefuzz
  A rapid HTTP downgrade smuggling scanner written in Go.
  ☆309Updated last year
• az7rb / crt.sh
  Crtsh Subdomain Enumeration | This bash script makes it easy to quickly save and parse the output from https://crt.sh website.
  ☆254Updated last year
• codingo / dorky
  A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon
  ☆244Updated 2 years ago
• danialhalo / SqliSniper
  Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers
  ☆307Updated last year
• rynosec / LEAKEY
  LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and e…
  ☆380Updated 2 years ago
• rs-loves-bugs / xsshunter
  ☆175Updated 3 months ago
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆420Updated this week