Alternatives and similar repositories for headerpwn

Users that are interested in headerpwn are comparing it to the libraries listed below

• devanshbatham / rayder
  A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows
  ☆298Updated 2 years ago
• root-tanishq / userefuzz
  User-Agent , X-Forwarded-For and Referer SQLI Fuzzer
  ☆382Updated 2 years ago
• sw33tLie / uff
  unleashed ffuf
  ☆232Updated last month
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆257Updated 10 months ago
• Hackmanit / TInjA
  TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…
  ☆398Updated 7 months ago
• zzzteph / sheye
  Opensource assets and vulnerability scanning tool
  ☆187Updated 6 months ago
• edoardottt / pphack
  The Most Advanced Client-Side Prototype Pollution Scanner
  ☆243Updated last week
• hansmach1ne / LFImap
  Local File Inclusion discovery and exploitation tool
  ☆329Updated 11 months ago
• sysdig / wafer
  ☆219Updated last year
• SAPT01 / HBSQLI
  Automated Tool for Testing Header Based Blind SQL Injection
  ☆318Updated 2 years ago
• Invicti-Security / brainstorm
  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
  ☆377Updated last year
• Moopinger / smugglefuzz
  A rapid HTTP downgrade smuggling scanner written in Go.
  ☆310Updated last year
• RikunjSindhwad / Task-Ninja
  Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!
  ☆152Updated 3 months ago
• jthack / ffufai
  AI-powered ffuf wrapper
  ☆613Updated 3 weeks ago
• SirBugs / endext
  EndExt is a .go tool for extracting all the possible endpoints from the JS files
  ☆219Updated last year
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆362Updated 3 years ago
• edoardottt / csprecon
  Discover new target domains using Content Security Policy
  ☆495Updated last week
• TheGetch / Burp-Suite-Pro-Scan-Profiles
  Custom scan profiles for use with Burp Suite Pro
  ☆148Updated last year
• SeifElsallamy / Blind-XSS-Manager
  Never forget where you inject.
  ☆296Updated 4 months ago
• BishopFox / sj
  A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
  ☆714Updated last month
• BountySecurity / gbounty
  GBounty is a multi-step website vulnerability scanner developed in Golang designed to help companies, pentesters, and bug hunters identif…
  ☆156Updated 3 months ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆452Updated 3 years ago
• projectdiscovery / tldfinder
  A streamlined tool for discovering private TLDs for security research.
  ☆231Updated last week
• shreyaschavhan / advanced-sql-injection-for-awae
  ☆204Updated 10 months ago
• carlospolop / fuzzhttpbypass
  This tool use fuuzzing to try to bypass unknown authentication methods, who knows...
  ☆254Updated last year
• Hackmanit / template-injection-table
  The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.
  ☆105Updated 5 months ago
• rynosec / LEAKEY
  LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and e…
  ☆380Updated 2 years ago
• MandConsultingGroup / porch-pirate
  Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitati…
  ☆443Updated last year
• e1abrador / sub.Monitor
  Self-hosted passive subdomain continous monitoring tool.
  ☆169Updated last year
• Net-hunter121 / API-Wordlist
  ☆249Updated 4 years ago