Burp Suite extension that enhances Burp Active Scan by adding template engine specific SSTI payloads.
☆28Feb 20, 2024Updated 2 years ago
Alternatives and similar repositories for BlindSSTIScanner
Users that are interested in BlindSSTIScanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- All-in Fuzzer. Burp suite extension for auto fuzzing params, headers, body☆37Apr 9, 2026Updated 6 months ago
- 代码审计关键词扫描工具☆11Apr 29, 2024Updated 2 years ago
- SNMP Bash Script to discover valid community strings, dump basic information, check for write permission and check for RCE.☆11Apr 27, 2024Updated 2 years ago
- A quick and dirty (and a little shitty) burp extension that uses cheap deepseek api to send request and response and maybe found somethin…☆36Jan 26, 2025Updated last year
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Text4Shell的burp被动扫描插件☆36Dec 29, 2022Updated 3 years ago
- ☆29May 22, 2024Updated 2 years ago
- NetScan CLI is a command-line tool for retrieving and analyzing IP address information. It provides detailed subnet and organization data…☆62Sep 4, 2024Updated 2 years ago
- Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.☆53Jan 26, 2026Updated 9 months ago
- 一个用于修改右键插件菜单层级的Burpsuite插件。A simple BurpSuite extension to change extension context menu level.☆14Jan 15, 2024Updated 2 years ago
- A BurpSuite extension for vulnerability Scanning☆31Feb 16, 2024Updated 2 years ago
- CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC☆15Aug 8, 2026Updated 2 months ago
- text4shell(CVE-2022-42889) BurpSuite Scanner☆20Dec 9, 2022Updated 3 years ago
- 一个既可主动，又可被动提取链接的burp插件☆47Mar 29, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- List of custom Nuclei templates☆16Nov 4, 2023Updated 2 years ago
- Private vulnerability testing suite☆12Mar 30, 2021Updated 5 years ago
- 一款微信小程序源码包信息收集工具，根据已有项目改编☆24Feb 11, 2025Updated last year
- 万户数据库解密☆21Dec 3, 2023Updated 2 years ago
- ☆17Jan 24, 2023Updated 3 years ago
- Go scanner to find web cache poisoning vulnerabilities in a list of URLs☆149Feb 21, 2024Updated 2 years ago
- IDOR Scanner is a Burp Suite extension that automates the detection and enumeration of potentially vulnerable numeric fields to identify …☆45Feb 24, 2025Updated last year
- Burp Suite Extensions☆13Oct 19, 2021Updated 5 years ago
- Firebase_Checker is Python tool to analyze APK files and web applications for Firebase-related vulnerabilities. This tool identifies secu…☆65Nov 6, 2025Updated 11 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Repo for hosting rayder workflows☆65Aug 31, 2023Updated 3 years ago
- Subdomains wordlist generted from subdomains of public bug bounty programs☆11Mar 25, 2025Updated last year
- URLess is a simple but powerful tool that removes paths from URLs, generating multiple variations of the base domain. This is useful for …☆17Apr 1, 2025Updated last year
- HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains.…☆21Dec 29, 2023Updated 2 years ago
- Ollama AI Analyzer runs directly on your local computer, using Ollama's AI models to analyze your HTTP requests and responses. This means…☆33Mar 1, 2025Updated last year
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆39May 5, 2024Updated 2 years ago
- A utility for recursively traversing SSL/TLS certificates for collecting DNS names☆46Aug 26, 2023Updated 3 years ago
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- My personal collection of nuclei templates made for fuzzing.☆29Sep 6, 2024Updated 2 years ago
- Grep subdomains from web pages.☆42Feb 10, 2025Updated last year
- Get list of subsidiaries for a selected company☆32Dec 21, 2024Updated last year
- Token Tailor is a Burp Suite Community Edition extension that aims to simplify security testing by automating JWT renewal.☆38Sep 30, 2025Updated last year
- Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.☆12Feb 3, 2024Updated 2 years ago
- Burp extension used to snip any header from all the requests.☆25Nov 12, 2023Updated 2 years ago
- Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the int…☆145Dec 7, 2024Updated last year