A Burp Suite extension that detects, catalogs, and exports developer comments, secrets, and keywords embedded in both HTTP response bodies and JavaScript files. Supports live scanning, replay detection, and advanced filtering across domains and content types.
☆19Sep 18, 2025Updated last year
Alternatives and similar repositories for commentcrusader-burp
Users that are interested in commentcrusader-burp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dump all available paths and/or endpoints on WADL file.☆96Nov 24, 2025Updated 10 months ago
- A browser bookmark to show hidden fields and enable disabled fields on a web page☆20Oct 29, 2023Updated 2 years ago
- Burp extension for Recursive Request Exploits (RRE) — DEFCON 2025☆125Jan 30, 2026Updated 8 months ago
- Android webviews and securiy☆25Jul 19, 2026Updated 2 months ago
- This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities …☆27Apr 30, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆18Dec 11, 2025Updated 9 months ago
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆19Apr 17, 2024Updated 2 years ago
- A tool that helps change the recovery configuration of a Windows service to make lateral movement more stealthy☆45Feb 8, 2026Updated 8 months ago
- Additional active scan checks for BURP☆29Oct 3, 2024Updated 2 years ago
- A Dockerized build pipeline for custom Windows x64 shellcode☆54Dec 12, 2025Updated 9 months ago
- PoC Bypass Chrome Cookies App-Bound Encryption v20☆10Apr 9, 2025Updated last year
- Simple powershell script to tests for "GHOST" SPN's☆17Oct 16, 2025Updated 11 months ago
- Tactical Race Exploitation & Concurrency Orchestrator☆29Jan 4, 2026Updated 9 months ago
- Top 2025 Vulnerabilities You Shouldn’t Accept in a Pentest Report☆14Feb 6, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Find XS-Leaks in the browser by diffing DOM-Graphs in two states☆20Jun 24, 2026Updated 3 months ago
- Burp Suite Pro extension☆11May 26, 2017Updated 9 years ago
- Enhanced version of binaryninja-ollama and without using the ollama Python library☆13Jan 23, 2025Updated last year
- A self-hosted, real-time collaborative workspace for offensive security assessments.☆42Feb 20, 2026Updated 7 months ago
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage…☆132Sep 12, 2025Updated last year
- ☆14Aug 10, 2022Updated 4 years ago
- Convert kirbi ticket from mimikatz into hashcat format to crack it☆13Mar 5, 2019Updated 7 years ago
- MLOps Attack Toolkit in Python☆16Feb 20, 2026Updated 7 months ago
- Load various payload (DLL from memory, Exe, etc...) in a way to evade static analysis of Antivirus. It can fetch data from various method…☆22Jun 18, 2026Updated 3 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Slack Leak scans all Slack public and private channels for sensitive information such as credit cards, API tokens, private keys, password…☆22Jul 23, 2025Updated last year
- Cheatsheets and write ups for the CREST CRT and CCT Exams.☆21Aug 5, 2020Updated 6 years ago
- ☆1,179Jan 28, 2026Updated 8 months ago
- Evasive shellcode loader for Red Teaming☆18Aug 15, 2025Updated last year
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 7 months ago
- Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them☆28Updated this week
- takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities☆62Mar 1, 2026Updated 7 months ago
- A kubectl plugin that explains WHY a permission is granted in Kubernetes RBAC by showing the exact Role/ClusterRole + Binding chain.☆17Aug 8, 2026Updated 2 months ago
- ☆20Dec 14, 2021Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆40Nov 6, 2025Updated 11 months ago
- A web frontend for tesseract-ocr☆11Aug 4, 2023Updated 3 years ago
- ☆23Sep 12, 2025Updated last year
- ☆10Aug 9, 2024Updated 2 years ago
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated last year
- Apple mDNS Cache Pressure Tool☆17Apr 11, 2026Updated 5 months ago
- Stream Claude Code's hidden output (thinking, tool calls, subagents) to a separate terminal in real-time (Rust port)☆23Sep 22, 2026Updated 2 weeks ago