Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.
☆63Jul 12, 2026Updated 4 months ago
Alternatives and similar repositories for Authz-ExeC
Users that are interested in Authz-ExeC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 4 months ago
- Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)☆16May 6, 2026Updated 6 months ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆80Aug 28, 2026Updated 2 months ago
- TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite☆99Aug 24, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Fuzzing Infrastructure using afl++ for coverage guided fuzzing including triaging and live dashboard.☆50Jul 23, 2026Updated 3 months ago
- A simple HAR-based JavaScript recon automation kit for organizing JS files, endpoints, secrets, and gf-filtered attack surface during bug…☆19May 20, 2026Updated 5 months ago
- rep+ — Burp-style HTTP Repeater for Firefox DevTools with built-in AI to explain requests and suggest attacks☆37Jan 8, 2026Updated 10 months ago
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 10 months ago
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆98Sep 10, 2026Updated 2 months ago
- 0xJS is an AI-powered JavaScript Security Tool☆68Apr 16, 2026Updated 6 months ago
- Stealth hybrid URL mapper☆60Oct 21, 2026Updated 3 weeks ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- ☆16Jun 28, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Burp_Suite-Antigravity_AI-Bug_Bounty_Hunter☆61Feb 9, 2026Updated 9 months ago
- Here you can find mostly all disclosed h1 reports☆21Apr 4, 2019Updated 7 years ago
- ☆16Jun 14, 2026Updated 4 months ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- A Fuzzing skill based on purely what i know.☆44Jun 3, 2026Updated 5 months ago
- 30 Claude Code Skills + 60+ integrated tools for HackerOne/Bugcrowd bug bounty hunters☆45Jun 2, 2026Updated 5 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago
- ☆98Oct 17, 2026Updated 3 weeks ago
- Fast Go-based XSS assessment toolkit☆20Mar 18, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆49Mar 16, 2026Updated 7 months ago
- gosqli is a fast and simple tool for detecting blind SQL injection vulnerabilities. It supports scanning URLs with custom payloads, paral…☆17Jun 22, 2026Updated 4 months ago
- NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF☆77May 15, 2026Updated 5 months ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 3 weeks ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- ☆24Aug 12, 2026Updated 3 months ago
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆14Mar 14, 2026Updated 7 months ago
- ☆50Feb 27, 2026Updated 8 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆35Jun 18, 2026Updated 4 months ago
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆38Sep 16, 2026Updated last month
- ☆31Jan 19, 2026Updated 9 months ago
- ☆78May 5, 2025Updated last year
- ☆14Jul 18, 2026Updated 3 months ago
- Electro-XSS , a buggy desktop app developed with the Electron framework.☆13Feb 10, 2022Updated 4 years ago
- ☆13Mar 6, 2025Updated last year
Are these results useful?