A Burp Suite extension that detects, catalogs, and exports developer comments, secrets, and keywords embedded in both HTTP response bodies and JavaScript files. Supports live scanning, replay detection, and advanced filtering across domains and content types.
☆19Sep 18, 2025Updated last year
Alternatives and similar repositories for commentcrusader-burp
Users that are interested in commentcrusader-burp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Burp extension for Recursive Request Exploits (RRE) — DEFCON 2025☆125Jan 30, 2026Updated 8 months ago
- Dump all available paths and/or endpoints on WADL file.☆97Nov 24, 2025Updated 11 months ago
- A browser bookmark to show hidden fields and enable disabled fields on a web page☆20Oct 29, 2023Updated 3 years ago
- ☆16Jun 8, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Android webviews and securiy☆25Jul 19, 2026Updated 3 months ago
- Whitepaper☆16Dec 1, 2025Updated 10 months ago
- Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).☆22Oct 19, 2026Updated last week
- SubFors v0.1: Fast subdomain discovery tool combining Google/Bing/DuckDuckGo dorks, CT logs, web archives, and brute-forcing in Go.☆14May 10, 2025Updated last year
- ☆13Feb 12, 2026Updated 8 months ago
- ☆19Dec 11, 2025Updated 10 months ago
- A Dockerized build pipeline for custom Windows x64 shellcode☆54Dec 12, 2025Updated 10 months ago
- Purpose management for this organization☆11Jan 13, 2026Updated 9 months ago
- Passive macOS AirDrop monitor TUI — collects live telemetry from unified logs, AWDL, Bonjour, and sharingd☆14Mar 29, 2026Updated 7 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- This repository is a curated collection of skills, plugins, and automation pipelines designed for Claude Code — Anthropic's CLI for AI-as…☆80Oct 19, 2026Updated last week
- Untangle is a multi-layer web server fingerprinting tool☆14May 14, 2024Updated 2 years ago
- LANCE started as a tool to fill a gap that kept appearing: teams deploying LLMs into production with no structured adversarial evaluation…☆12Mar 17, 2026Updated 7 months ago
- Experimental Lightweight Windows pure C Beacon CodeName: BlackBasalt for LazyOwn RedTeam Framework C2☆12Oct 8, 2026Updated 3 weeks ago
- This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities …☆27Apr 30, 2025Updated last year
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆18Apr 17, 2024Updated 2 years ago
- A version of bash that knows what you are probably trying to do.☆14May 11, 2026Updated 5 months ago
- CodeMorpher is a powerful tool that can help you to protect your code from prying eyes, ensuring that your intellectual property remains …☆12Jan 9, 2023Updated 3 years ago
- Enhanced version of binaryninja-ollama and without using the ollama Python library☆13Jan 23, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Tactical Race Exploitation & Concurrency Orchestrator☆29Jan 4, 2026Updated 9 months ago
- Simple powershell script to tests for "GHOST" SPN's☆17Oct 16, 2025Updated last year
- Additional active scan checks for BURP☆29Oct 3, 2024Updated 2 years ago
- ☆20Oct 10, 2025Updated last year
- Burp Suite Pro extension☆11May 26, 2017Updated 9 years ago
- toolings for pentester to makes their life easier☆10Feb 25, 2023Updated 3 years ago
- An up-to-date and maintained fork of The Web Application Vulnerability Scanner Evaluation Project☆17May 11, 2026Updated 5 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Updated this week
- Fuzz WebSockets with custom Python code☆19Aug 21, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- AI agent for autonomous cyber operations☆15May 19, 2026Updated 5 months ago
- Convert kirbi ticket from mimikatz into hashcat format to crack it☆13Mar 5, 2019Updated 7 years ago
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 4 years ago
- This project is a Dockerized WordPress development environment with two configurations, one using Nginx and the other using Apache. It in…☆10May 29, 2025Updated last year
- Audit Sophos XG firewall for compliance with security baseline☆16Aug 15, 2026Updated 2 months ago
- MLOps Attack Toolkit in Python☆16Feb 20, 2026Updated 8 months ago
- Burp MCP Security Analysis Toolkit☆19May 8, 2026Updated 5 months ago