Alternatives and similar repositories for crlfuzz

Users that are interested in crlfuzz are comparing it to the libraries listed below

• Hackmanit / Web-Cache-Vulnerability-Scanner
  Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…
  ☆1,030Updated 2 months ago
• PentestPad / subzy
  Subdomain takeover vulnerability checker
  ☆1,426Updated last year
• d3mondev / puredns
  Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned ent…
  ☆2,040Updated last year
• assetnote / wordlists
  Automated & Manual Wordlists provided by Assetnote
  ☆1,559Updated 3 weeks ago
• ksharinarayanan / SSRFire
  An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
  ☆965Updated 3 years ago
• projectdiscovery / shuffledns
  MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering…
  ☆1,529Updated last week
• s0md3v / uro
  declutters url lists for crawling/pentesting
  ☆1,479Updated 8 months ago
• KathanP19 / JSFScan.sh
  Automation for javascript recon in bug bounty.
  ☆1,057Updated 2 years ago
• projectdiscovery / chaos-client
  Go client to communicate with Chaos DB API.
  ☆795Updated last week
• m4ll0k / BBTz
  BBT - Bug Bounty Tools (examples💡)
  ☆1,855Updated last year
• lutfumertceylan / top25-parameter
  For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙
  ☆1,806Updated last year
• dwisiswant0 / findom-xss
  A fast DOM based XSS vulnerability scanner with simplicity.
  ☆831Updated 3 years ago
• defparam / smuggler
  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
  ☆2,033Updated last year
• sh377c0d3 / Payloads
  Payload Arsenal for Pentration Tester and Bug Bounty Hunters
  ☆914Updated 2 years ago
• 1ndianl33t / Gf-Patterns
  GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
  ☆1,381Updated last year
• m4ll0k / SecretFinder
  SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files
  ☆2,312Updated last year
• R0X4R / Garud
  An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…
  ☆798Updated 2 years ago
• devploit / nomore403
  🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast…
  ☆1,381Updated 4 months ago
• jaeles-project / jaeles
  The Swiss Army knife for automated Web Application Testing
  ☆2,298Updated last year
• hahwul / jwt-hack
  JSON Web Token Hack Toolkit
  ☆948Updated last week
• 0xInfection / XSRFProbe
  The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
  ☆1,248Updated 9 months ago
• m4ll0k / Atlas
  Quick SQLMap Tamper Suggester
  ☆1,387Updated 3 years ago
• devanshbatham / FavFreak
  Making Favicon.ico based Recon Great again !
  ☆1,242Updated 2 years ago
• tomnomnom / anew
  A tool for adding new lines to files, skipping duplicates
  ☆1,595Updated last year
• r0075h3ll / Oralyzer
  Open Redirection Analyzer
  ☆802Updated 2 years ago
• hahwul / XSpear
  🔱 Powerfull XSS Scanning and Parameter analysis tool&gem
  ☆1,323Updated 3 years ago
• Sh1Yo / x8
  Hidden parameters discovery suite
  ☆1,942Updated last year
• elkokc / reflector
  Burp plugin able to find reflected XSS on page in real-time while browsing on site
  ☆1,184Updated 4 years ago
• lc / subjs
  Fetches javascript file from a list of URLS or subdomains.
  ☆814Updated 4 months ago
• lobuhi / byp4xx
  40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...
  ☆1,771Updated 2 years ago