Abusing Self-XSS and Clickjacking to trigger XSS
☆136Mar 18, 2017Updated 9 years ago
Alternatives and similar repositories for XSSJacking
Users that are interested in XSSJacking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Stealing CSRF tokens with CSS injection (without iFrames)☆320Feb 7, 2018Updated 8 years ago
- BountyDash is a tool to combine your rewards from all platforms, giving you insights about your progress and bug hunting patterns.☆164Apr 24, 2025Updated last year
- A BurpSuite plugin to detect Same Origin Method Execution vulnerabilities☆59Apr 18, 2017Updated 9 years ago
- Allows you to trace where inputs are reflected back to the user.☆38Oct 12, 2017Updated 9 years ago
- ☆331Jan 8, 2018Updated 8 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Takes ip range, Scan all open SSL Certs, Grab Cnames☆111Sep 23, 2018Updated 8 years ago
- A demo of altering an opened tab after a timer☆124Jun 11, 2016Updated 10 years ago
- RFD Checker - security CLI tool to test Reflected File Download issues☆62Feb 26, 2019Updated 7 years ago
- A tool for checking a hash:pass pot file for hashes from a user:hash file☆12Oct 23, 2016Updated 10 years ago
- Terraform configuration to build a Burp Private Collaborator Server☆28Sep 16, 2018Updated 8 years ago
- An Out-of-Band XXE server for retrieving file contents over FTP.☆185May 27, 2020Updated 6 years ago
- AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.☆256Feb 23, 2022Updated 4 years ago
- Burp Extender plugin that generates a sitemap of a website using Wayback Machine☆228May 8, 2018Updated 8 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆117Mar 29, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.☆43May 1, 2020Updated 6 years ago
- A JavaScript clickjacking PoC generator☆24Jul 3, 2019Updated 7 years ago
- XSSB is a proactive DOM sanitizer, defending against client-side injection attacks!☆38Aug 26, 2018Updated 8 years ago
- Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]☆305Oct 14, 2018Updated 8 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆139May 25, 2017Updated 9 years ago
- It is a Python+Perl script to exploit ASP.net Padding Oracle vulnerability.☆18Aug 2, 2016Updated 10 years ago
- A tool for embedding XXE/XML exploits into different filetypes☆1,181Dec 16, 2024Updated last year
- Provide a sort of shell-ish interface to make file directory traversal quicker and easier.☆25Jan 1, 2017Updated 9 years ago
- A Burp Suite content discovery plugin that add the smart into the Buster!☆379Oct 12, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.☆319May 22, 2023Updated 3 years ago
- Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.☆160Jul 10, 2025Updated last year
- Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains …☆223Dec 7, 2022Updated 3 years ago
- a tiny tool for swf hacking, just browse it:)☆243Mar 13, 2013Updated 13 years ago
- BURP extension providing a set of values for the HTTP request "Host" header for the "BURP Intruder" in order to abuse virtual host resolu…☆61Oct 8, 2017Updated 9 years ago
- ☆279Oct 19, 2021Updated 5 years ago
- ☆14Mar 31, 2018Updated 8 years ago
- A Rails application containing multiple vulnerabilities used for demonstration purposes☆20Mar 26, 2015Updated 11 years ago
- Writeups for various crackmes, CTFs, wargames, etc.☆15Apr 21, 2017Updated 9 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.☆222Oct 16, 2023Updated 3 years ago
- Next-gen BurpSuite penetration testing tool☆459Jan 27, 2016Updated 10 years ago
- Local enumeration and exploitation framework.☆18Aug 16, 2017Updated 9 years ago
- A Pythonic wrapper to MassDNS☆24Mar 21, 2018Updated 8 years ago
- A front-end JavaScript toolkit for creating DNS rebinding attacks.☆45Jun 19, 2018Updated 8 years ago
- POC for CVE-2018-15685☆42Aug 24, 2018Updated 8 years ago
- ☆20Jun 2, 2016Updated 10 years ago