Alternatives and similar repositories for Burp-Suite:

Users that are interested in Burp-Suite are comparing it to the libraries listed below

• sarperavci / MXS
  A powerful asynchronous XSS scanner supporting up to 1,500 concurrent requests.
  ☆159Updated 7 months ago
• coffinxp / nuclei-templates
  ☆258Updated last month
• capture0x / LFI-FINDER
  LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion (LFI) vulnerabilities
  ☆294Updated last year
• Asperis-Security / xssFuzz
  🚀 XSSFUZZ - A tool for detecting XSS vulnerabilities in web applications.
  ☆96Updated 6 months ago
• gotr00t0day / forbiddenpass
  ☆163Updated 8 months ago
• trilokdhaked / Bug-Bounty-Methodology
  ☆182Updated last year
• gprime31 / WAF-bypass-xss-payloads
  XSS payloads for bypassing WAF. This repository is updating continuously.
  ☆238Updated last year
• drak3hft7 / VPS-Bug-Bounty-Tools
  Script that automates the installation of the main tools used for web application penetration testing and Bug Bounty.
  ☆197Updated last year
• dirtycoder0124 / XSS-Automation
  ☆140Updated 3 months ago
• R-s0n / bug-bounty-village-defcon32-workshop
  The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village
  ☆129Updated 7 months ago
• coffinxp / customBsqli
  ☆100Updated last month
• iamunixtz / LazyXss
  Automation tool to testing and confirm the xss vulnerability.
  ☆226Updated last month
• SAPT01 / HBSQLI
  Automated Tool for Testing Header Based Blind SQL Injection
  ☆273Updated last year
• blackhatethicalhacking / Bug_Bounty_Tools_and_Methodology
  Bug Bounty Tools used on Twitch - Recon
  ☆294Updated 6 months ago
• coffinxp / payloads
  ☆322Updated last month
• PhHitachi / HackBar
  HackBar is a security audit tool that will enable you to pentest websites more easily. ... You can use it to check site security by perfo…
  ☆138Updated 4 years ago
• dragonked2 / Dons
  Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript…
  ☆80Updated last month
• HernanRodriguez1 / SQLi_Sleeps
  ☆118Updated last year
• xss0r / xssorRecon
  Automate Recon XSS Bug Bounty
  ☆152Updated last week
• WadQamar10 / My-Hunting-Methodology-
  My Private Bug Hunting Methodology
  ☆283Updated 4 months ago
• amrelsagaei / Bug-Bounty-Hunting-Methodology-2025
  Bug Bounty Methodology 2025: Tools, techniques, and steps to guide you through reconnaissance, enumeration, and testing.
  ☆99Updated 2 months ago
• linuxadi / 40k-nuclei-templates
  40,000+ Nuclei templates for security scanning and detection across diverse web applications and services
  ☆303Updated last year
• R-s0n / ars0n-framework-v2
  Bug Bounty Hunting Framework Designed to Help Beginners Compete w/ the Pros
  ☆80Updated last week
• TcherB31 / Nessus_Pro_Cracked
  Nessus is one of the many vulnerability scanners used during vulnerability assessments
  ☆95Updated 2 years ago
• osamahamad / FUZZING
  Collected fuzzing payloads from different resources
  ☆109Updated 9 months ago
• coffinxp / img-payloads
  ☆109Updated last month
• TheHermione / DorkFinder
  Automatic tool to find Google Dorks
  ☆33Updated 5 months ago
• shreyaschavhan / advanced-sql-injection-for-awae
  ☆195Updated last month
• H4cker-Nafeed / Nafeed-Broken-Link
  Nafeed-Broken-Link: A Python tool designed to check for broken social media links on a given domain. This script crawls all accessible pa…
  ☆62Updated 7 months ago
• thelicato / portswigger-labs
  A collection of solutions for every PortSwigger Academy Lab (in progress)
  ☆96Updated 3 years ago