Clientside vulnerability / reflected xss fuzzer
☆150Jul 29, 2023Updated 3 years ago
Alternatives and similar repositories for puff
Users that are interested in puff are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11May 15, 2020Updated 6 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- tool that generates bypasses for open redirects☆49Apr 18, 2022Updated 4 years ago
- ☆29Mar 18, 2020Updated 6 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Ffuf output browser☆38Feb 25, 2023Updated 3 years ago
- Get all the CNs from a list of domains☆46Aug 17, 2021Updated 5 years ago
- Web Application recon automation☆125Dec 18, 2020Updated 5 years ago
- OWASP Amass data source scripts (assetfinder, findomain, github, subfinder)☆106Oct 18, 2020Updated 6 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Sep 7, 2026Updated last month
- A tool which scrapes public github repositories for common naming conventions in variables, folders and files☆297Jun 3, 2024Updated 2 years ago
- Sync RGB devices to your spotify songs. Sync your keyboard, sync your headset, sync your mouse, sync your toaster, sync your toilet, sync…☆35Feb 1, 2021Updated 5 years ago
- ☆12Sep 23, 2023Updated 3 years ago
- Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomai…☆222Jul 10, 2020Updated 6 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- A golang utility to spider through a website searching for additional links.☆346Nov 7, 2020Updated 5 years ago
- Complex payload encoder☆247Jan 20, 2024Updated 2 years ago
- Making Favicon.ico based Recon Great again !☆1,317Aug 29, 2023Updated 3 years ago
- A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate☆210Jun 25, 2024Updated 2 years ago
- a javascript change monitoring tool for bugbounties☆735Jul 31, 2024Updated 2 years ago
- Secret and/or credential patterns used for gf.☆245Feb 10, 2023Updated 3 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SS…☆174Nov 11, 2020Updated 5 years ago
- Host Header Injection Checker☆86Mar 2, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Dump all available paths and/or endpoints on WADL file.☆97Nov 24, 2025Updated 11 months ago
- web-based-fuzzer☆31Jun 26, 2020Updated 6 years ago
- Fetches javascript file from a list of URLS or subdomains.☆866Jul 22, 2025Updated last year
- Suite of programs meant to aid in bug hunting and security assessments☆78Dec 29, 2019Updated 6 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- A better version of my xssfinder tool - scans for different types of xss on a list of urls.☆188Aug 3, 2019Updated 7 years ago
- Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.☆37Jul 7, 2020Updated 6 years ago
- Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.☆111Feb 14, 2022Updated 4 years ago
- Quick SQLMap Tamper Suggester☆1,409Jul 18, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it us…☆60Oct 25, 2020Updated 6 years ago
- Command line tool for testing CRLF injection on a list of domains.☆161Apr 14, 2024Updated 2 years ago
- Rust-based high performance domain permutation generator.☆305Dec 2, 2023Updated 2 years ago
- Change monitoring app that checks the content of web pages in different periods.☆362Feb 21, 2026Updated 8 months ago
- Python Script to Print the name of the companies that are acquired by a Target Company and the Time of Acquisition.☆24Dec 5, 2021Updated 4 years ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆648Jul 7, 2025Updated last year
- Find subdomains on GitLab.☆106Apr 28, 2024Updated 2 years ago