A React/Next.js-aware secret hunter for single-page applications.
☆20Sep 5, 2026Updated 2 months ago
Alternatives and similar repositories for spafox
Users that are interested in spafox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Anyone who has used Burp Suite Repeater for more than 20 minutes knows the problem. You send request after request, and every tab is name…☆19Oct 6, 2026Updated last month
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆24Mar 16, 2026Updated 7 months ago
- Some scripts to enumerate and attack Jenkins servers☆12Feb 1, 2024Updated 2 years ago
- admire on winpeas and linpeas for privilege escalation method in any boxes, i created this with to optimize and easy our recon on the act…☆14Jun 15, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- find sources and sinks from js files☆17Apr 4, 2026Updated 7 months ago
- hunt.md: an open, plain-text format for threat hunts. Spec, examples and tooling.☆42Oct 29, 2026Updated 2 weeks ago
- ☆11Sep 29, 2025Updated last year
- A Synapse Rapid Power-Up that allows Synapse to interact with Assemblyline v4.☆10Apr 13, 2024Updated 2 years ago
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆48Dec 22, 2023Updated 2 years ago
- A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines☆13Jul 30, 2026Updated 3 months ago
- This lab is for **EDUCATIONAL PURPOSES ONLY**. Use it responsibly and only on systems you own or have explicit permission to test. Do not…☆24Feb 20, 2026Updated 8 months ago
- ☆12Aug 1, 2022Updated 4 years ago
- Reverse Shell troll software☆12Sep 24, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- ☆269Dec 10, 2025Updated 11 months ago
- A personal collection of cross-project Codex skills, plus sourced recommendations for useful external skills.☆22Nov 6, 2026Updated last week
- A mirror of several precompiled standalone red-teaming tools.☆19Feb 2, 2023Updated 3 years ago
- ☆81Mar 5, 2026Updated 8 months ago
- A Flipper Zero that stops guessing and starts reasoning: ML-guided RFID/NFC fuzzing & access-control auditing that turns raw card reads i…☆28Oct 29, 2026Updated 2 weeks ago
- ☆11Dec 27, 2023Updated 2 years ago
- A recon Framework for Bug Bounty Hunters that would convert the output of a script into Markdown syntax document, which would help them t…☆12Sep 21, 2021Updated 5 years ago
- ☆16Apr 17, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Utility for ClickOnce usage for Red Teams.☆15Jun 11, 2026Updated 5 months ago
- OSINT Tool for Nigerian Phone Numbers☆21Jul 7, 2020Updated 6 years ago
- Hack. Sleep. Repeat☆22Updated this week
- Bash script to spray known credentials against multiple services with netexec, inspired by nxcspray and nxc-sweep☆13Sep 2, 2026Updated 2 months ago
- Runs sshd as a unprivileged user for persistence☆10Jun 23, 2019Updated 7 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Updated this week
- Kubernetes Enumeration Tools for Penetration Testing - K8s security assessment scripts for red team operations☆17Apr 17, 2026Updated 6 months ago
- A tool for automating network enumeration and reconnaissance☆18Jan 20, 2025Updated last year
- Comprehensive Protection Against Deepfakes, Deepnudes & Harmful Content☆26Jan 3, 2026Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ⚔️ Slays exposed .git repos even when /.git/ returns 403. Dumps config, HEAD, logs, index and full history over HTTP, rebuilding the sour…☆14Sep 21, 2026Updated last month
- 🌍 My website☆10Aug 2, 2026Updated 3 months ago
- mattew crawls target websites, extracts hidden attack surface, runs security analysis, fingerprints technology, and generates professiona…☆16Jul 2, 2026Updated 4 months ago
- UAC Bypass using CMSTP in Rust☆43Dec 6, 2024Updated last year
- 🦋 Glasswing — See through Flutter's TLS. Bypass BoringSSL SSL pinning on Android: static libflutter.so patching + Frida runtime hooks. N…☆24Oct 18, 2026Updated 3 weeks ago
- ☆18Jul 23, 2025Updated last year
- ☆21Dec 10, 2020Updated 5 years ago
Are these results useful?