Clientside vulnerability / reflected xss fuzzer
☆150Jul 29, 2023Updated 3 years ago
Alternatives and similar repositories for puff
Users that are interested in puff are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11May 15, 2020Updated 6 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago
- ☆30Mar 18, 2020Updated 6 years ago
- ☆36Jul 15, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Suite of programs meant to aid in bug hunting and security assessments☆78Dec 29, 2019Updated 6 years ago
- Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomai…☆222Jul 10, 2020Updated 6 years ago
- Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.☆36Jul 7, 2020Updated 6 years ago
- Sync RGB devices to your spotify songs. Sync your keyboard, sync your headset, sync your mouse, sync your toaster, sync your toilet, sync…☆35Feb 1, 2021Updated 5 years ago
- A tool which scrapes public github repositories for common naming conventions in variables, folders and files☆297Jun 3, 2024Updated 2 years ago
- Web Application recon automation☆125Dec 18, 2020Updated 5 years ago
- Perform operations on URLs like extracting paths, parameter names and/or values, domain name, host name (without HTTP[s]).☆28Aug 19, 2020Updated 6 years ago
- Ffuf output browser☆38Feb 25, 2023Updated 3 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Fastest recursive HTTP fuzzer, like a Ferrari.☆94Nov 27, 2020Updated 5 years ago
- ☆12Sep 23, 2023Updated 3 years ago
- Signatures for jaeles scanner by @j3ssie☆115Apr 20, 2024Updated 2 years ago
- public dns server list for dmut project☆18Sep 8, 2026Updated last month
- Making Favicon.ico based Recon Great again !☆1,314Aug 29, 2023Updated 3 years ago
- OWASP Amass data source scripts (assetfinder, findomain, github, subfinder)☆106Oct 18, 2020Updated 5 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Sep 7, 2026Updated last month
- Secret and/or credential patterns used for gf.☆245Feb 10, 2023Updated 3 years ago
- A better version of my xssfinder tool - scans for different types of xss on a list of urls.☆189Aug 3, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A golang utility to spider through a website searching for additional links.☆345Nov 7, 2020Updated 5 years ago
- A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it us…☆60Oct 25, 2020Updated 5 years ago
- Host Header Injection Checker☆86Mar 2, 2022Updated 4 years ago
- Command line tool for testing CRLF injection on a list of domains.☆160Apr 14, 2024Updated 2 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SS…☆174Nov 11, 2020Updated 5 years ago
- Get all the CNs from a list of domains☆45Aug 17, 2021Updated 5 years ago
- A tool for append URLs, skipping duplicates/paths & combine parameters.☆128Mar 2, 2022Updated 4 years ago
- Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common m…☆76Mar 22, 2024Updated 2 years ago
- ☆60Jul 3, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆648Jul 7, 2025Updated last year
- web-based-fuzzer☆31Jun 26, 2020Updated 6 years ago
- Dump all available paths and/or endpoints on WADL file.☆96Nov 24, 2025Updated 10 months ago
- ASN reconnaissance script☆138Jan 25, 2024Updated 2 years ago
- a javascript change monitoring tool for bugbounties☆734Jul 31, 2024Updated 2 years ago
- XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|ID…☆347Jun 17, 2023Updated 3 years ago
- Fetches javascript file from a list of URLS or subdomains.☆862Jul 22, 2025Updated last year