yataf extracts secrets and paths from files or urls - its best used against javascript files
☆54Sep 11, 2024Updated 2 years ago
Alternatives and similar repositories for yataf
Users that are interested in yataf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tool to scan servers and hosts using dynamic paths.☆22Oct 1, 2025Updated last year
- Tool to fuzz for interesting vhost.☆23Jan 8, 2025Updated last year
- BOR - Break On Request, is a burp extension that provides a custom context menu for marking requests to be stopped by the interceptor wit…☆13Nov 18, 2022Updated 3 years ago
- Provides an overview of the inner file structure of a PDF☆24Sep 26, 2022Updated 4 years ago
- A simple Google Protobuf Decoder for Burp☆43Nov 22, 2022Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- HashiCorp-relevant rules for the Semgrep code analysis tool☆42Oct 3, 2023Updated 3 years ago
- Combine words from two wordlist files and concatenate them with an optional delimiter☆40Sep 25, 2023Updated 3 years ago
- Golang tool which helps dropping the irrelevant entries from your ffuf result file.☆144Sep 16, 2024Updated 2 years ago
- ☆106Jan 3, 2023Updated 3 years ago
- Pointer is a Fast Simple Lightweight Tool for Endpoint Discovery.☆14Dec 30, 2023Updated 2 years ago
- ☆29Jul 14, 2023Updated 3 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆110Jan 30, 2025Updated last year
- Extract most frequent words in a list of subdomains☆13Feb 15, 2025Updated last year
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Filter and enrich a list of subdomains by level☆218Sep 25, 2023Updated 3 years ago
- Generate a cross join, also known as a Cartesian product, from the lines of the specified files. This process is useful for creating fuzz…☆21Jun 29, 2023Updated 3 years ago
- An extension to use Semgrep inside Burp Suite.☆90May 23, 2025Updated last year
- Extract endpoints marked as disallow in robots files to generate wordlists.☆60Mar 2, 2022Updated 4 years ago
- Declutters URLs in a fast and flexible way, for improving input for web hacking automations such as crawlers and vulnerability scans.☆60Jan 22, 2023Updated 3 years ago
- Unauthenticated enumeration of AWS IAM Roles.☆28Apr 18, 2026Updated 6 months ago
- CLI tool that extracts a regex pattern from a list of urls ( Rust )☆63Sep 14, 2022Updated 4 years ago
- Saves pages to Wayback machine☆12Dec 2, 2024Updated last year
- Semgrep-based Policy Controller for Kubernetes☆47Apr 4, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automated learning of regexes for DNS discovery☆392Feb 18, 2023Updated 3 years ago
- Identify virtual hosts by similarity comparison☆141Mar 18, 2026Updated 7 months ago
- Detects request smuggling via HTTP/2 downgrades.☆94Jul 30, 2022Updated 4 years ago
- Black box fuzzer for web applications☆440Jul 20, 2025Updated last year
- A wrapper around grep, to help you grep for things! - Improved version of gf by @tomnomnom.☆61Nov 17, 2023Updated 2 years ago
- Improve automated and semi-automated active scanning in Burp Pro☆66Jun 4, 2025Updated last year
- A CDN Domain Fronting Tool or Websocket Discovery written in Python☆56Mar 13, 2023Updated 3 years ago
- ☆153Aug 18, 2023Updated 3 years ago
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆279Sep 11, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts☆83Feb 4, 2023Updated 3 years ago
- Recurrent Neural Network SubDomain Discovery Tool☆97Sep 20, 2022Updated 4 years ago
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 4 years ago
- ☆25May 31, 2024Updated 2 years ago
- Detect Program Bug Bounty☆41Jun 12, 2025Updated last year
- Framework for blind boolean-based sql injections exploatation. Use it if sqlmap does shit.☆29Mar 26, 2022Updated 4 years ago
- A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter sp…☆21Jan 20, 2025Updated last year