ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.
☆116Jan 4, 2024Updated 2 years ago
Alternatives and similar repositories for ngocok
Users that are interested in ngocok are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆124Apr 10, 2024Updated 2 years ago
- TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines fo…☆428Apr 27, 2026Updated 6 months ago
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆11Sep 22, 2023Updated 3 years ago
- A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON☆116Mar 27, 2024Updated 2 years ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆41Dec 12, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts☆150Aug 11, 2026Updated 2 months ago
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens☆173Nov 29, 2024Updated last year
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆42Apr 23, 2024Updated 2 years ago
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Jul 23, 2026Updated 3 months ago
- Process URLs and remove duplicate query parameters.☆27Mar 19, 2024Updated 2 years ago
- APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and …☆380Mar 28, 2025Updated last year
- Continuous Reconnaissance and Vulnerability Scanning for Bug Bounties☆21Jun 6, 2024Updated 2 years ago
- Subdomain Scanner - the most exhaustive tool for sub-domain recognition and mapping to related IPs and ASNs☆18Jul 4, 2025Updated last year
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…☆168Oct 28, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- One line command and control backdoors for APIs and web applications.☆52Apr 9, 2024Updated 2 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- ☆591Nov 24, 2025Updated 11 months ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆880Oct 19, 2026Updated last week
- A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing☆142Jun 27, 2023Updated 3 years ago
- Azure DevOps Services Attack Toolkit☆156Jul 27, 2026Updated 3 months ago
- SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…☆467Mar 28, 2024Updated 2 years ago
- Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitati…☆478Jan 25, 2024Updated 2 years ago
- A Burp Suite extension for Lightning/Aura framework security testing with advanced action management, context editing, and comprehensive …☆68Mar 2, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A simple reverse ssh/proxy implant PoC for *nix systems.☆57Jul 5, 2024Updated 2 years ago
- A Slack bot phishing framework for Red Teaming exercises☆167Apr 27, 2024Updated 2 years ago
- Blazing fast GraphQL discovery & fingerprinting toolbox.☆135Nov 21, 2023Updated 2 years ago
- This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.☆250Mar 17, 2025Updated last year
- A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomain…☆905May 3, 2023Updated 3 years ago
- A Burp Suite extension for finding DNS vulnerabilities in web applications!☆91Sep 12, 2023Updated 3 years ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆232Aug 25, 2026Updated 2 months ago
- The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.☆491Oct 3, 2023Updated 3 years ago
- ☆51Jun 13, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")☆57Dec 18, 2023Updated 2 years ago
- A Firefox Web Extension to improve the discovery of DOM XSS.☆294Nov 13, 2024Updated last year
- Simple PoC for demonstrating Race Conditions on Websockets☆54Sep 14, 2023Updated 3 years ago
- 😹 Python project to bruteforce Apache Tomcat manager login with known-default credentials☆96Mar 12, 2024Updated 2 years ago
- The perfect butler for pentesters, bug-bounty hunters and security researchers☆95Aug 12, 2026Updated 2 months ago
- CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scr…☆720Sep 30, 2026Updated 3 weeks ago
- Automatically look for paramater reflections in the HTTP response☆18Apr 30, 2025Updated last year