A React/Next.js-aware secret hunter for single-page applications.
☆20Sep 5, 2026Updated last month
Alternatives and similar repositories for spafox
Users that are interested in spafox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- Anyone who has used Burp Suite Repeater for more than 20 minutes knows the problem. You send request after request, and every tab is name…☆19Oct 6, 2026Updated 2 weeks ago
- 🎯 Chrome Extension - Passive scanner for Dependency Confusion vulnerabilities in npm/PyPI packages☆44Jan 31, 2026Updated 8 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.☆41Sep 20, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Some scripts to enumerate and attack Jenkins servers☆12Feb 1, 2024Updated 2 years ago
- A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads i…☆27Sep 19, 2026Updated last month
- A powerful Burp Suite extension that imports Postman collections☆33Aug 1, 2025Updated last year
- find sources and sinks from js files☆17Apr 4, 2026Updated 6 months ago
- CVE-2023-2640 CVE-2023-32629☆13Aug 15, 2023Updated 3 years ago
- XML Signature Wrapping Burp Suite Extensions☆23Dec 8, 2025Updated 10 months ago
- Play with libmalloc☆19Jan 2, 2024Updated 2 years ago
- Using the Vulnerable Bank App project to teach Engineers how to automate security testing of vulnerable applications in the CI/CD Pipelin…☆13Apr 14, 2026Updated 6 months ago
- A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines☆12Jul 30, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆50Aug 17, 2026Updated 2 months ago
- A Synapse Rapid Power-Up that allows Synapse to interact with Assemblyline v4.☆10Apr 13, 2024Updated 2 years ago
- Zero trust. Zero security. Total exposure. A deliberately vulnerable health tech platform with AI Chatbot for learning about application …☆49Mar 27, 2026Updated 6 months ago
- This lab is for **EDUCATIONAL PURPOSES ONLY**. Use it responsibly and only on systems you own or have explicit permission to test. Do not…☆24Feb 20, 2026Updated 8 months ago
- A mirror of several precompiled standalone red-teaming tools.☆19Feb 2, 2023Updated 3 years ago
- ☆11Dec 27, 2023Updated 2 years ago
- certstream + analytics☆11Jan 17, 2020Updated 6 years ago
- ☆268Dec 10, 2025Updated 10 months ago
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- OSINT Tool for Nigerian Phone Numbers☆21Jul 7, 2020Updated 6 years ago
- Kubernetes Enumeration Tools for Penetration Testing - K8s security assessment scripts for red team operations☆17Apr 17, 2026Updated 6 months ago
- ☆15Jul 30, 2024Updated 2 years ago
- nxdomain subdomain enumeration☆10Jul 17, 2022Updated 4 years ago
- Find and Extract schema from JavaScript files/Endpoint☆24Oct 16, 2026Updated last week
- ☆80Mar 5, 2026Updated 7 months ago
- EVM in python from scratch because why not☆11Aug 22, 2022Updated 4 years ago
- A recon Framework for Bug Bounty Hunters that would convert the output of a script into Markdown syntax document, which would help them t…☆12Sep 21, 2021Updated 5 years ago
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆16Jun 14, 2026Updated 4 months ago
- Professional WAF security testing toolkit☆13Jun 5, 2026Updated 4 months ago
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆16Jun 11, 2026Updated 4 months ago
- Runs sshd as a unprivileged user for persistence☆10Jun 23, 2019Updated 7 years ago
- ☆20Dec 10, 2020Updated 5 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Sep 7, 2026Updated last month
- Modern offline-first Application Security Intelligence Platform for Android, iOS, Flutter and React Native with attack-chain analysis, ex…☆186Jul 21, 2026Updated 3 months ago