johnnyg / xss-detectiveLinks
A userscript to assist in detecting cross-site scripting vulnerabilities
☆26Updated 15 years ago
Alternatives and similar repositories for xss-detective
Users that are interested in xss-detective are comparing it to the libraries listed below
Sorting:
- Just lists of lists of lists !☆16Updated last month
- Alternative to XSS Hunter for blind XSS.☆51Updated 2 years ago
- It grep subdomains, email/username, build custom wordlist etc from gau results☆48Updated 2 years ago
- golang tool to scan domains or single domains with know security issues against xmlrpc☆61Updated last year
- Simple fork from degoogle original project with bug hunting purposes☆89Updated 3 years ago
- A Proof of Concept for Clickjacking Attacks☆56Updated 4 years ago
- Framework to automate Bug Bounty Reconnaissance☆44Updated 4 years ago
- All known and unknown public POC's for wordpress themes and plugins☆78Updated 4 years ago
- This tool allows you to find ssti vulnerability with ease!☆21Updated 3 years ago
- A Burp Suite extension for CSRF proof of concepts.☆52Updated 2 years ago
- Scanning APK file for URIs, endpoints & secrets.☆43Updated 4 years ago
- Enumerate old versions of robots.txt paths using Wayback Machine for content discovery☆52Updated last year
- ☆42Updated 2 years ago
- 📚 An ultimate collection wordlists of the best-known CMS☆91Updated last year
- Smuggler can detect and exploit -HTTP Smuggling- vulnerabilities.☆40Updated 10 months ago
- Droz_scan is a automated script, that runs all the queries of drozer in a single run☆26Updated 2 years ago
- Bash script to automate Bug Bounty Reconnaissance☆44Updated 4 years ago
- This tool aims at accumulating javascript files from a given set of subdomains to discover hidden endpoints. It swims through JS files to…☆47Updated 2 years ago
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files☆35Updated 4 years ago
- I collected it to help the bug hunter get a reward☆58Updated 2 years ago
- Check if domain has bug bounty program or not☆28Updated 2 years ago
- Small script to check a list of domains against open redirect vulnerability☆28Updated 3 years ago
- ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …☆60Updated 3 years ago
- s3 brute force tool☆45Updated 4 years ago
- KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Po…☆59Updated 4 years ago
- Oneliners curated from my experience and from the internet☆22Updated 4 years ago
- World's most Powerful and Advanced Cross Site Scripting Software☆28Updated 5 years ago
- A Simple Tool to Pull Paid Bounty Scopes for Wide Recon Actvities☆105Updated 4 years ago
- ☆21Updated 4 years ago
- WordPress Bruteforce List, Default paths and endpoints☆73Updated 3 years ago