dub-flow / sessionprobeLinks
SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.
☆461Updated last year
Alternatives and similar repositories for sessionprobe
Users that are interested in sessionprobe are comparing it to the libraries listed below
Sorting:
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…☆432Updated 9 months ago
- Pen Test Report Generation and Assessment Collaboration☆572Updated this week
- Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/o…☆837Updated this week
- The Internets #1 Subdomain Takeover Tool☆285Updated 5 months ago
- RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers…☆668Updated last year
- Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.☆730Updated last month
- SubSnipe is a tool designed to help find subdomains that are vulnerable to takeover.☆130Updated 9 months ago
- A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.☆454Updated 2 weeks ago
- Web Security Scanner☆341Updated this week
- ☆507Updated last year
- TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…☆387Updated 6 months ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆708Updated last month
- ☆243Updated 9 months ago
- The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…☆659Updated 2 months ago
- Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scena…☆217Updated last year
- A humble, and 𝗳𝗮𝘀𝘁, security-oriented HTTP headers analyzer.☆344Updated this week
- Find CVEs associated to Linux and public exploits on github☆119Updated 7 months ago
- A suite for hunting suspicious targets, expose domains and phishing discovery☆372Updated 2 months ago
- ☆237Updated last year
- Secret Magpie - Secret Detection Tool☆246Updated last year
- Pentest Report Generator☆434Updated 3 weeks ago
- Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.☆1,007Updated 7 months ago
- AI-powered ffuf wrapper☆549Updated 11 months ago
- Websec interview questions by tib3rius answered☆310Updated 2 years ago
- TerminatorZ is a highly sophisticated and efficient web security tool that scans for top potential vulnerabilities with known CVEs in you…☆284Updated last year
- A collection of Active Directory, phishing, mobile technology, system, service, web application, and wireless technology weaknesses that …☆254Updated 3 years ago
- VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, i…☆534Updated last week
- Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.☆438Updated last year
- 💀 Don't fear the Reaper 👻☆694Updated 3 weeks ago
- Domain_checker application is the trial/demo version for the new EASM (External Attack Surface Management) system called HydrAttack (hydr…☆188Updated last year