API URL fuzzer that cross-joins hosts and paths into normalized URLs, probes them over HTTP, and reports responding endpoints.
☆30Jun 11, 2026Updated 4 months ago
Alternatives and similar repositories for apiffuf
Users that are interested in apiffuf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self…☆18Jun 23, 2026Updated 4 months ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago
- ☆15Nov 15, 2025Updated 11 months ago
- xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and …☆30May 23, 2026Updated 5 months ago
- Burpsuite Extension for Jsmon☆26Jul 1, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆17Jul 19, 2022Updated 4 years ago
- RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)☆18Dec 12, 2025Updated 10 months ago
- Some extra regex patterns for tomnomnom's excellent tool GF☆11Sep 7, 2022Updated 4 years ago
- Clean Indirect Syscalls with Syscall Tampering.☆42Updated this week
- Scans WordPress sites to find unclaimed plugin slugs on the public directory.☆27Oct 12, 2025Updated last year
- David Lin's Windows 10 Cheatsheet☆11Mar 5, 2024Updated 2 years ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆65Updated this week
- DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get …☆23Oct 12, 2026Updated last week
- A powerful Burp Suite extension that automatically detects JavaScript URLs from HTTP traffic, scans them using TruffleHog for secrets det…☆30Oct 23, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- cve-2026-48907 scanner☆64Jun 27, 2026Updated 3 months ago
- Got a GitHub token (PAT, App, OAuth) and want to figure out what permissions it has? This repo solves this by allowing you to test and va…☆23Oct 29, 2025Updated 11 months ago
- LLM Vulnerable Application☆13Aug 19, 2023Updated 3 years ago
- ☆60Jul 15, 2026Updated 3 months ago
- ☆75Jul 15, 2026Updated 3 months ago
- Run-scoped LLM observation proxy with an embedded Bifrost data plane☆18Aug 4, 2026Updated 2 months ago
- Exact-build Chrome M150 V8/JSPI sandbox escape PoC used to recover a Google v8CTF flag☆16Aug 26, 2026Updated last month
- cryptoptic☆19Sep 22, 2026Updated last month
- Study trackers, Obsidian prep vaults, practice boxes and resources for Hack The Box certs: CJCA, CPTS, CWES, CDSA, CWEE, CAPE, CWPE, COAE…☆34Updated this week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Collection of nmap nse scripts☆24May 15, 2019Updated 7 years ago
- Capture 2G/3G/4G/5G air interface network traces - Successor for QCSuper. 📡 A general client for the diagnostic interface of Snapdragon …☆24Oct 15, 2026Updated last week
- Remote dynamic .NET obfuscator and AMSI/ETW patch tool for bypassing Defender☆36May 29, 2026Updated 4 months ago
- A collection of scripts for bug-bounty related stuff☆38Sep 4, 2020Updated 6 years ago
- ☆14Mar 11, 2025Updated last year
- argus - RAG based vulnerability scanner☆15Aug 17, 2026Updated 2 months ago
- Bug Bounty Recon Script☆19Aug 14, 2020Updated 6 years ago
- simple tool for finding javascript files from webapps☆10Apr 20, 2023Updated 3 years ago
- This is a writeup about challenges in voorivex challenge (Berserk vs Zodd)☆13Jul 12, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ParamX is a tool designed to extract and categorize interesting subdomains and parameters from URLs.☆35Oct 7, 2025Updated last year
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆40Jun 18, 2026Updated 4 months ago
- header-fuzz allows you to fuzz any HTTP header with a wordlist and evaluate success or failure based on the returning HTTP status code.☆17Apr 15, 2020Updated 6 years ago
- ☆36Jan 8, 2026Updated 9 months ago
- A powerful Go-based multi-shell handler for managing multiple reverse shell connections simultaneously with features like shell type dete…☆68Feb 23, 2026Updated 8 months ago
- all manner of wordlists☆23Jan 19, 2022Updated 4 years ago
- ☆34Apr 22, 2025Updated last year