Alternatives and similar repositories for crass

Users that are interested in crass are comparing it to the libraries listed below

• EnableSecurity / Identity-Crisis

  View on GitHub
  A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers
  ☆15Sep 4, 2014Updated 11 years ago
• nccgroup / WebFEET

  View on GitHub
  Web Filter External Enumeration Tool (WebFEET)
  ☆78Aug 24, 2014Updated 11 years ago
• cybercdh / vpaths

  View on GitHub
  Take a list of URIs and print all the of the paths
  ☆10Aug 16, 2020Updated 5 years ago
• RUB-NDS / BurpSSOExtension

  View on GitHub
  An extension for BurpSuite that highlights SSO messages in Burp's proxy window..
  ☆120Apr 26, 2021Updated 4 years ago
• mikecardwell / sslScanner

  View on GitHub
  Scan SSL based TCP services, ips, ports and network ranges to obtain certificate expiry data. Get automated alerts about certificates exp…
  ☆29Feb 20, 2016Updated 9 years ago
• GrrrDog / ACEDcup

  View on GitHub
  Payload generator for Java Binary Deserialization attack with Commons FileUpload (CVE-2013-2186)
  ☆38Apr 14, 2016Updated 9 years ago
• silentsignal / ActiveScan3Plus

  View on GitHub
  Modified version of ActiveScan++ Burp Suite extension
  ☆31Jan 30, 2017Updated 9 years ago
• NetSPI / MoneyX

  View on GitHub
  MoneyX is an intentionally vulnerable JSP application used for training developers in application security concepts.
  ☆31May 10, 2016Updated 9 years ago
• modzero / burp-ResponseClusterer

  View on GitHub
  Burp plugin that clusters responses to show an overview of received responses
  ☆15Jun 7, 2019Updated 6 years ago
• tijme / similar-request-excluder

  View on GitHub
  A Burp Suite extension that automatically marks similar requests as 'out-of-scope'.
  ☆43May 1, 2020Updated 5 years ago
• infobyte / distro_checker

  View on GitHub
  Cross Distribution Exploit Testing
  ☆28Sep 23, 2015Updated 10 years ago
• wireghoul / graudit

  View on GitHub
  grep rough audit - source code auditing tool
  ☆1,677Dec 19, 2025Updated last month
• praetorian-inc / gladius

  View on GitHub
  Automated Responder/secretsdump.py cracking
  ☆187May 16, 2016Updated 9 years ago
• cylance / SMBTrap

  View on GitHub
  Tools developed to test the Redirect to SMB issue
  ☆84Jun 2, 2015Updated 10 years ago
• 0xacb / viewgen

  View on GitHub
  Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
  ☆661Feb 1, 2025Updated last year
• lightfaith / locasploit

  View on GitHub
  Local enumeration and exploitation framework.
  ☆18Aug 16, 2017Updated 8 years ago
• P3GLEG / PwnBack

  View on GitHub
  Burp Extender plugin that generates a sitemap of a website using Wayback Machine
  ☆227May 8, 2018Updated 7 years ago
• strozfriedberg / xxe-recursive-download

  View on GitHub
  ☆232Nov 18, 2015Updated 10 years ago
• ameenmaali / whoareyou

  View on GitHub
  whoareyou is a tool to find the underlying technology/software used in a list of websites passed through stdin (using Wappalyzer dataset)
  ☆32Jun 15, 2020Updated 5 years ago
• GrrrDog / ZeroNights-WebVillage-2017

  View on GitHub
  ☆72Nov 20, 2017Updated 8 years ago
• pmbento / karmadetector

  View on GitHub
  Android wireless karma attack detector
  ☆67Aug 26, 2015Updated 10 years ago
• floyd-fuh / tiny-mitm-proxy

  View on GitHub
  Probably one of the smallest SSL MITM proxies you can make
  ☆183Aug 26, 2015Updated 10 years ago
• nxenon / grpc-lab

  View on GitHub
  gRPC / gRPC-Web Pentest Practicing Lab
  ☆10Aug 29, 2023Updated 2 years ago
• olliencc / appsec-vulnerability-periodic-table

  View on GitHub
  Application Security Vulnerability Periodic Table
  ☆14Aug 25, 2014Updated 11 years ago
• kantega / kwashc

  View on GitHub
  Kantega Web Application Security Hero Challenge
  ☆19Dec 3, 2020Updated 5 years ago
• nccgroup / Decoder-Improved

  View on GitHub
  Improved decoder for Burp Suite
  ☆138Aug 30, 2021Updated 4 years ago
• ameserole / Akeso

  View on GitHub
  A Platform for Testing Secure Coding/Config
  ☆19Nov 13, 2018Updated 7 years ago
• carlosgprado / NaFl

  View on GitHub
  A clone (of the basic core) of AFL fuzzer
  ☆74Feb 6, 2016Updated 10 years ago
• rfdslabs / Mimosa-Framework

  View on GitHub
  Mimosa Framework to abuse EPC functionality on CISCO Routers.
  ☆30Dec 12, 2024Updated last year
• subinacls / Filibuster

  View on GitHub
  ☆27Jul 18, 2017Updated 8 years ago
• cujanovic / SSRF-Testing

  View on GitHub
  SSRF (Server Side Request Forgery) testing resources
  ☆2,484Oct 12, 2024Updated last year
• maK- / parameth

  View on GitHub
  This tool can be used to brute discover GET and POST parameters
  ☆1,390Aug 24, 2019Updated 6 years ago
• nccgroup / JDSer-ngng

  View on GitHub
  A Burp Extender plugin, that will deserialized java objects and encode them in XML using the Xtream library.
  ☆26Apr 14, 2015Updated 10 years ago
• nccgroup / ssh_user_enum

  View on GitHub
  SSH User Enumeration Script in Python Using The Timing Attack
  ☆94Aug 30, 2016Updated 9 years ago
• burp-hash / burp-hash

  View on GitHub
  ☆32Aug 5, 2015Updated 10 years ago
• n4xh4ck5 / V1D0m

  View on GitHub
  Enumerate subdomains through Virustotal
  ☆32Nov 2, 2019Updated 6 years ago
• carmaa / nacker

  View on GitHub
  Nacker is a tool to circumvent 802.1x Network Access Control (NAC) on a wired LAN. Nacker will help you locate any non-802.1x configurabl…
  ☆106Sep 24, 2014Updated 11 years ago
• cedowens / Mythic-Macro-Generator

  View on GitHub
  Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens
  ☆48Apr 15, 2021Updated 4 years ago
• floyd-fuh / afl-fuzzing-scripts

  View on GitHub
  Fuzzing scripts for the American Fuzzy Lop (AFL) fuzzer
  ☆48Apr 24, 2016Updated 9 years ago