A Burp Suite extension that detects, catalogs, and exports developer comments, secrets, and keywords embedded in both HTTP response bodies and JavaScript files. Supports live scanning, replay detection, and advanced filtering across domains and content types.
☆19Sep 18, 2025Updated last year
Alternatives and similar repositories for commentcrusader-burp
Users that are interested in commentcrusader-burp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dump all available paths and/or endpoints on WADL file.☆96Nov 24, 2025Updated 9 months ago
- A browser bookmark to show hidden fields and enable disabled fields on a web page☆20Oct 29, 2023Updated 2 years ago
- Burp extension for Recursive Request Exploits (RRE) — DEFCON 2025☆125Jan 30, 2026Updated 7 months ago
- ☆16Jun 8, 2026Updated 3 months ago
- Android webviews and securiy☆25Jul 19, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This repository contains a number of insecure self-hosted applications that allows interested security engineers to test vulnerabilities …☆27Apr 30, 2025Updated last year
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 4 years ago
- Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform☆19Apr 17, 2024Updated 2 years ago
- ☆18Dec 11, 2025Updated 9 months ago
- A tool that helps change the recovery configuration of a Windows service to make lateral movement more stealthy☆44Feb 8, 2026Updated 7 months ago
- Additional active scan checks for BURP☆29Oct 3, 2024Updated last year
- A Dockerized build pipeline for custom Windows x64 shellcode☆54Dec 12, 2025Updated 9 months ago
- Fuzz WebSockets with custom Python code☆19Aug 21, 2024Updated 2 years ago
- PoC Bypass Chrome Cookies App-Bound Encryption v20☆10Apr 9, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Simple powershell script to tests for "GHOST" SPN's☆17Oct 16, 2025Updated 11 months ago
- Fuzzer for fastboot commands☆23Sep 14, 2023Updated 3 years ago
- Tactical Race Exploitation & Concurrency Orchestrator☆29Jan 4, 2026Updated 8 months ago
- Top 2025 Vulnerabilities You Shouldn’t Accept in a Pentest Report☆14Feb 6, 2025Updated last year
- Find XS-Leaks in the browser by diffing DOM-Graphs in two states☆20Jun 24, 2026Updated 2 months ago
- Audit Sophos XG firewall for compliance with security baseline☆16Aug 15, 2026Updated last month
- A self-hosted, real-time collaborative workspace for offensive security assessments.☆42Feb 20, 2026Updated 6 months ago
- A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage…☆132Sep 12, 2025Updated last year
- ☆14Aug 10, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Convert kirbi ticket from mimikatz into hashcat format to crack it☆13Mar 5, 2019Updated 7 years ago
- Load various payload (DLL from memory, Exe, etc...) in a way to evade static analysis of Antivirus. It can fetch data from various method…☆22Jun 18, 2026Updated 3 months ago
- Slack Leak scans all Slack public and private channels for sensitive information such as credit cards, API tokens, private keys, password…☆21Jul 23, 2025Updated last year
- Cheatsheets and write ups for the CREST CRT and CCT Exams.☆21Aug 5, 2020Updated 6 years ago
- ☆1,177Jan 28, 2026Updated 7 months ago
- Pipeleek scans CI/CD logs and artifacts to detect leaked secrets and pivot from them☆26Updated this week
- Evasive shellcode loader for Red Teaming☆18Aug 15, 2025Updated last year
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 6 months ago
- takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities☆62Mar 1, 2026Updated 6 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A kubectl plugin that explains WHY a permission is granted in Kubernetes RBAC by showing the exact Role/ClusterRole + Binding chain.☆17Aug 8, 2026Updated last month
- ☆20Dec 14, 2021Updated 4 years ago
- A web frontend for tesseract-ocr☆11Aug 4, 2023Updated 3 years ago
- ☆23Sep 12, 2025Updated last year
- A Productivity-Boosting Burp Suite extension written in Kotlin that enables persistent sticky session handling in web application testing…☆15Oct 8, 2025Updated 11 months ago
- Stream Claude Code's hidden output (thinking, tool calls, subagents) to a separate terminal in real-time (Rust port)☆22Sep 7, 2026Updated last week
- undust is a URL pattern generator that helps uncover archived, backup, and temporary files left behind on web servers. Given a URL, it ge…☆54Jul 17, 2025Updated last year