Alternatives and similar repositories for forbidden

Users that are interested in forbidden are comparing it to the libraries listed below

• zapstiko / wordlists
  All Type of Payloads
  ☆137Updated last year
• osmedeus / osmedeus-base
  Build your own reconnaissance system with Osmedeus Next Generation
  ☆199Updated 4 months ago
• d3mondev / burp-vps-proxy
  This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.
  ☆245Updated 9 months ago
• projectdiscovery / interactsh-web
  Web dashboard for Interactsh client
  ☆236Updated this week
• silentsignal / burp-text4shell
  Text4Shell scanner for Burp Suite
  ☆190Updated 3 years ago
• trickest / mksub
  Generate tens of thousands of subdomain combinations in a matter of seconds
  ☆274Updated 2 years ago
• trickest / mkpath
  Make URL path combinations using a wordlist
  ☆171Updated 2 years ago
• wdahlenburg / interactsh-collaborator
  Burpsuite plugin for Interact.sh
  ☆228Updated last year
• cve-sandbox / jquery-ui
  CVE Collection of jQuery UI XSS Payloads
  ☆119Updated 2 years ago
• daffainfo / bypass-403
  Go script for bypassing 403 forbidden
  ☆157Updated 4 years ago
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆362Updated 3 years ago
• Impact-I / x8-Burp
  Hidden parameters discovery suite
  ☆225Updated 3 years ago
• zzzteph / probable_subdomains
  Subdomains analysis and generation tool. Reveal the hidden!
  ☆244Updated 6 months ago
• ARPSyndicate / bug-bounty-domains
  Domains belonging to the most reputed public bug bounty programs. [NOT FOR NON-MONETARY OR PRIVATE PROGRAMS]
  ☆224Updated last year
• edoardottt / favirecon
  Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
  ☆222Updated 2 weeks ago
• Fadavvi / Sub-Drill
  A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.
  ☆115Updated last week
• hisxo / JSpector
  A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues
  ☆370Updated 2 years ago
• ethicalhackingplayground / TProxer
  A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.
  ☆184Updated 4 years ago
• Anof-cyber / PyCript
  Burp Suite extension to decrypt/encrypt any encrypted traffic (AES/RSA/Encodings and more) with custom code in any language
  ☆217Updated 2 weeks ago
• MindPatch / lorsrf
  Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load
  ☆296Updated last year
• emadshanab / Nmap-NSE-scripts-collection
  ☆171Updated 2 months ago
• iamthefrogy / nerdbug
  Full Nuclei automation script with logic explanation.
  ☆245Updated 3 years ago
• PortSwigger / pentest-mapper
  A Burp Suite Extension for Application Penetration Testing to map flows and vulnerabilities
  ☆119Updated 2 years ago
• volkandindar / agartha
  A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violati…
  ☆389Updated 3 weeks ago
• moeinfatehi / Backup-Finder
  A burp suite extension that reviews backup, old, temporary and unreferenced files on web server for sensitive information (OWASP WSTG-CON…
  ☆163Updated last year
• daffainfo / all-about-apikey
  Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)
  ☆287Updated 2 years ago
• ThreatUnknown / jsubfinder
  jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).
  ☆277Updated 11 months ago
• carlospolop / fuzzhttpbypass
  This tool use fuuzzing to try to bypass unknown authentication methods, who knows...
  ☆255Updated last year
• daffainfo / match-replace-burp
  Useful "Match and Replace" burpsuite rules
  ☆359Updated 2 years ago
• gwen001 / DataExtractor
  A Burp Suite extension to extract datas from source code while browsing.
  ☆160Updated last year