Clientside vulnerability / reflected xss fuzzer
☆150Jul 29, 2023Updated 3 years ago
Alternatives and similar repositories for puff
Users that are interested in puff are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11May 15, 2020Updated 6 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- A demo vulnerable application for stealing sensitive information by abusing Google Chrome cache☆20Jan 19, 2020Updated 6 years ago
- ☆28Mar 18, 2020Updated 6 years ago
- ☆36Jul 15, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Suite of programs meant to aid in bug hunting and security assessments☆77Dec 29, 2019Updated 6 years ago
- Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomai…☆222Jul 10, 2020Updated 6 years ago
- Tests for SSRF by injecting a specified location into different headers. This is a Rust port of m4ll0k's tool.☆37Jul 7, 2020Updated 6 years ago
- Sync RGB devices to your spotify songs. Sync your keyboard, sync your headset, sync your mouse, sync your toaster, sync your toilet, sync…☆35Feb 1, 2021Updated 5 years ago
- A tool which scrapes public github repositories for common naming conventions in variables, folders and files☆297Jun 3, 2024Updated 2 years ago
- Web Application recon automation☆125Dec 18, 2020Updated 5 years ago
- Perform operations on URLs like extracting paths, parameter names and/or values, domain name, host name (without HTTP[s]).☆29Aug 19, 2020Updated 5 years ago
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- Ffuf output browser☆38Feb 25, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Fastest recursive HTTP fuzzer, like a Ferrari.☆91Nov 27, 2020Updated 5 years ago
- ☆12Sep 23, 2023Updated 2 years ago
- Signatures for jaeles scanner by @j3ssie☆117Apr 20, 2024Updated 2 years ago
- public dns server list for dmut project☆18Nov 30, 2023Updated 2 years ago
- Making Favicon.ico based Recon Great again !☆1,297Aug 29, 2023Updated 2 years ago
- OWASP Amass data source scripts (assetfinder, findomain, github, subfinder)☆106Oct 18, 2020Updated 5 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆159Nov 24, 2023Updated 2 years ago
- Secret and/or credential patterns used for gf.☆246Feb 10, 2023Updated 3 years ago
- A better version of my xssfinder tool - scans for different types of xss on a list of urls.☆189Aug 3, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A golang utility to spider through a website searching for additional links.☆343Nov 7, 2020Updated 5 years ago
- A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it us…☆62Oct 25, 2020Updated 5 years ago
- Host Header Injection Checker☆84Mar 2, 2022Updated 4 years ago
- Command line tool for testing CRLF injection on a list of domains.☆164Apr 14, 2024Updated 2 years ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SS…☆175Nov 11, 2020Updated 5 years ago
- Get all the CNs from a list of domains☆45Aug 17, 2021Updated 4 years ago
- A tool for append URLs, skipping duplicates/paths & combine parameters.☆128Mar 2, 2022Updated 4 years ago
- Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common m…☆76Mar 22, 2024Updated 2 years ago
- ☆60Jul 3, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆648Jul 7, 2025Updated last year
- web-based-fuzzer☆31Jun 26, 2020Updated 6 years ago
- Dump all available paths and/or endpoints on WADL file.☆96Nov 24, 2025Updated 8 months ago
- ASN reconnaissance script☆136Jan 25, 2024Updated 2 years ago
- a javascript change monitoring tool for bugbounties☆737Jul 31, 2024Updated 2 years ago
- XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|ID…☆349Jun 17, 2023Updated 3 years ago
- Fetches javascript file from a list of URLS or subdomains.☆859Jul 22, 2025Updated last year