Hermes is an automated security tool written in Python designed to discover Cross-Site Scripting (XSS) vulnerabilities in web applications. It uses a multi-stage process that combines several specialized third-party tools to find and validate XSS vulnerabilities efficiently.
☆10Aug 22, 2025Updated last year
Alternatives and similar repositories for Hermes
Users that are interested in Hermes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- Log all keyboard and terminal input/output for any app 记录任意程序的键盘输入和终端输入输出☆24Jul 14, 2026Updated 3 months ago
- Red Hat security advisories☆18Updated this week
- OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications☆21Oct 30, 2025Updated 11 months ago
- Web | Mobile | API | Thick Client | Source Code Review | Wireless | Network Pentesting etc...☆11Dec 17, 2025Updated 10 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Active Directory share enumeration tool☆13Apr 28, 2025Updated last year
- Using DLL sideloading to hijack the exe main thread before starting it! 使用dll侧载在exe程序主线程启动之前劫持主线程。☆29Jul 25, 2025Updated last year
- AI 驱动的自动化代码审计与漏洞挖掘平台，支持多 Agent 协作扫描、数据流分析、漏洞管理和可视化审计☆14Oct 8, 2026Updated 3 weeks ago
- Bash Script to download all Nuclei Templates from different awesome sources☆12Aug 7, 2021Updated 5 years ago
- 反取证程序，类似usbkill☆10Apr 22, 2023Updated 3 years ago
- Advanced AI-Powered Exploitation Framework | CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397 |☆18Jan 18, 2026Updated 9 months ago
- To use hackJS, specify a target URL that contains JavaScript files you want to analyze. The tool will fetch these JavaScript files, extra…☆20Jun 19, 2025Updated last year
- clfs CVE 的一些 POC 收集☆15Oct 27, 2022Updated 4 years ago
- MemShell List☆92Jul 18, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- The Ultimate OSINT Cheat Sheet is a comprehensive guide to open source intelligence gathering tools and techniques.☆13Oct 5, 2023Updated 3 years ago
- Spring Boot whitelabel error page SpEL rce EXP☆13May 24, 2024Updated 2 years ago
- A command-line utility for auditing DNS configuration using Zonemaster API☆33Aug 21, 2023Updated 3 years ago
- A quick and dirty way to bypass encrypted EPA to connect to a NetScaler Gateway☆20Oct 11, 2019Updated 7 years ago
- 一款利用某云厂商的物联网平台作为c2的框架☆23Jun 18, 2023Updated 3 years ago
- Template Nuclei SSTI☆34Nov 18, 2025Updated 11 months ago
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- DictLoader / 字典匹配ShellCode加载器 / Code By:Tas9er☆15Oct 25, 2025Updated last year
- ExpFuzz字典☆21May 27, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc…☆12Mar 11, 2025Updated last year
- IoM defualt mal package☆10Feb 22, 2026Updated 8 months ago
- FlowLens是一款支持 Agent 自动化挖掘逻辑漏洞的被动扫描工具，并在传统被动扫描工具基础上使用 Agent 对漏洞进行验证，并生成可复现的完整利用链。☆30Aug 12, 2026Updated 2 months ago
- URLFUZZ By T00ls.Net☆23Jul 4, 2023Updated 3 years ago
- Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC si…☆33Apr 6, 2025Updated last year
- 红队自动化打点神器！！！ ARL使用代理池联动nuclei，xray并通过企业微信机器人告警。☆26Sep 29, 2024Updated 2 years ago
- برنامج سطح مكتب بسيط بواجهة سهلة الاستخدام لتقطيع الصوتيات/المرئيات الطويلة بناءً على فترات زمنية مختلفة☆16Apr 26, 2023Updated 3 years ago
- This repository contain some datas about CVE's updated hourly, to help community Prioritize, based in sources the Threat Intelligence in …☆34Updated this week
- I have a deep passion for discovering new technologies, coding in various programming languages, and creating inventive software☆25Nov 3, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 天机办公安全平台是有安科技推出的一款全方位办公安全防护产品，包含DNS、SWG、CASB、FIDO2、PassKey、ZTNA、SASE、DLP等功能。☆43Oct 31, 2025Updated 11 months ago
- 基于Java jxbrowser 浏览器的登录枚举测试工具 (支持验证码识别)☆13Jul 10, 2025Updated last year
- A command line tool that reads from stdin and strips ANSI color codes from the input.☆10Feb 11, 2023Updated 3 years ago
- golang styles proxy client, support http/https, socks4/5, ssh☆52Updated this week
- ☆56Sep 13, 2022Updated 4 years ago
- sliver-webhook 实现上线通知☆25Jun 28, 2023Updated 3 years ago
- Burp Extension for a passive scanning JS files for endpoint links.☆57Nov 20, 2024Updated last year