Alternatives and similar repositories for xss-reflector

Users that are interested in xss-reflector are comparing it to the libraries listed below

• subzero987 / S3-Recon

  View on GitHub
  S3 Recon tips and tricks collected from different resources,Sorry if i missed to mention all resources owners
  ☆27Nov 13, 2021Updated 4 years ago
• emadshanab / Multi_tools_subdomains

  View on GitHub
  ☆22Jul 16, 2021Updated 4 years ago
• emadshanab / Adobe-Experience-Manager

  View on GitHub
  ☆34Jun 23, 2021Updated 4 years ago
• adrianlarion / pegaxss

  View on GitHub
  Magic Header Blind Xss tool (deliver blind xss payloads in request headers).
  ☆26May 30, 2021Updated 4 years ago
• xer0times / BugBounty

  View on GitHub
  Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...
  ☆148Jul 30, 2020Updated 5 years ago
• 0xAgun / All1

  View on GitHub
  Automated Recon Tool Installer
  ☆15Jun 29, 2022Updated 3 years ago
• thelikes / fuzznav

  View on GitHub
  parse ffuf & map endpoints to wordlists
  ☆21Feb 25, 2021Updated 4 years ago
• emadshanab / Blind-XSS-burp-match-and-replace

  View on GitHub
  ☆29Dec 13, 2023Updated 2 years ago
• 1ndianl33t / 1ndi-hacks

  View on GitHub
  Bug Bounty Tools
  ☆34Jul 2, 2020Updated 5 years ago
• felipecaon / BugBountyStuff

  View on GitHub
  Stuff for bug bounty
  ☆35Feb 1, 2023Updated 3 years ago
• redhuntlabs / Log4JHunt

  View on GitHub
  An automated, reliable scanner for the Log4Shell (CVE-2021-44228) vulnerability.
  ☆45Jan 22, 2025Updated last year
• AlfredBerg / dnsline

  View on GitHub
  Tool for making it easy to collect dns results from the CLI
  ☆40Aug 14, 2024Updated last year
• iamunixtz / jshunter-burp

  View on GitHub
  A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…
  ☆31Oct 23, 2025Updated 3 months ago
• Dheerajmadhukar / Prototype-Pollution-Lab_me_dheeraj

  View on GitHub
  Prototype-Pollution-Lab to chain the vulnerabilities between multiple accounts.
  ☆13Sep 11, 2021Updated 4 years ago
• shr3ddersec / Writeups

  View on GitHub
  Random Tips and Writeups.
  ☆15Feb 21, 2019Updated 6 years ago
• joefizz / autofindomain

  View on GitHub
  ☆24Jan 26, 2021Updated 5 years ago
• emadshanab / Scan-Apple-ASN-for-vulnerabilities-and-leave-no-port

  View on GitHub
  ☆44Jul 23, 2021Updated 4 years ago
• Josue87 / resolveDomains

  View on GitHub
  Given a list of domains, you resolve them and get the IP addresses.
  ☆47Mar 2, 2022Updated 3 years ago
• thalysonz / pentest-flutter-guide

  View on GitHub
  Repository aimed at helping to perform pentests on flutter applications
  ☆17Jul 10, 2024Updated last year
• orwagodfather / ShoLister

  View on GitHub
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆13May 10, 2022Updated 3 years ago
• fuzz-security / hackerone-reports

  View on GitHub
  Top disclosed reports from HackerOne
  ☆10Jun 9, 2020Updated 5 years ago
• darklotuskdb / SSTI-XSS-Finder

  View on GitHub
  XSS Finder Via SSTI
  ☆56Sep 14, 2023Updated 2 years ago
• TRIKKSS / Semgrep4BurpSuite

  View on GitHub
  burpsuite extension to analyze javascript files using semgrep
  ☆12Feb 3, 2025Updated last year
• 0xElkot / Bug-Bounty-Automation

  View on GitHub
  ☆116Nov 23, 2022Updated 3 years ago
• pry0cc / pscan

  View on GitHub
  A parallel scanner that utilises axiom to spin up servers and parallel scan using masscan.
  ☆16Jul 1, 2020Updated 5 years ago
• nullenc0de / discover

  View on GitHub
  Easy discovery of assets
  ☆13Jun 22, 2022Updated 3 years ago
• ethicalhackingplayground / Gxss

  View on GitHub
  Tool for checking reflecting Parameters in a URL.
  ☆10Aug 31, 2020Updated 5 years ago
• abhinavporwal / bug-bounty-dorks

  View on GitHub
  List of Google Dorks for sites that have responsible disclosure program & bug bounty program
  ☆32Apr 25, 2024Updated last year
• Static-Flow / vhostChecker

  View on GitHub
  VHostChecker takes a csv list of targets in the form of domain,ip,port and runs 4 seperate connection checks to get a quick sense of how …
  ☆33Sep 14, 2023Updated 2 years ago
• emadshanab / DIR-WORDLISTS

  View on GitHub
  Some wordlists collected form github to all bug bounty hunters.
  ☆39Jul 30, 2021Updated 4 years ago
• random-robbie / S3-Listable

  View on GitHub
  S3 Buckets that will let you list all files inside them
  ☆14Apr 26, 2018Updated 7 years ago
• emgaurav / objectify-s3

  View on GitHub
  Objectify-s3 is a tool that recursively checks AWS S3 buckets and objects for misconfigured permissions.
  ☆15Aug 3, 2024Updated last year
• j3ssie / cinfo

  View on GitHub
  Extract domain from SSL Information
  ☆15Nov 23, 2021Updated 4 years ago
• romanrounkle / burp_extensions

  View on GitHub
  Burp Suite Extensions
  ☆12Oct 19, 2021Updated 4 years ago
• Kitsun3Sec / DomainTricks

  View on GitHub
  ☆14Sep 27, 2023Updated 2 years ago
• ap062 / bba

  View on GitHub
  bug bounty automation
  ☆13Jul 2, 2021Updated 4 years ago
• e11i0t4lders0n / sql-injection-payload-list

  View on GitHub
  🎯 SQL Injection Payload List
  ☆10Jun 6, 2021Updated 4 years ago
• winsecurity / CheatSheets

  View on GitHub
  ☆32Aug 12, 2021Updated 4 years ago
• alexlauerman / IncrementMePlease

  View on GitHub
  Burp extension to increment a parameter in each active scan request
  ☆12Jul 16, 2025Updated 7 months ago