Let's check if your target is vulnerable for client side prototype pollution.
☆64Jan 9, 2024Updated 2 years ago
Alternatives and similar repositories for proto-find
Users that are interested in proto-find are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆519Jun 22, 2022Updated 4 years ago
- A tool to guess the rest of the shortnames provided by vulnerable IIS instances.☆44Aug 12, 2023Updated 3 years ago
- Graphql introspection query analyzer.☆18Mar 28, 2023Updated 3 years ago
- A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues☆376Jul 25, 2023Updated 3 years ago
- ☆149Dec 23, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A Multi-Processing Tool for collecting and extracting information to an Excel file from a Burp Suite output file.☆10Apr 8, 2024Updated 2 years ago
- ☆36Jul 15, 2020Updated 6 years ago
- A simple Swagger-ui scanner that can detect old versions vulnerable to various XSS attacks☆61Aug 30, 2019Updated 7 years ago
- Jeeves SQLI Finder☆214May 13, 2022Updated 4 years ago
- Burp extension to create target specific and tailored wordlist from burp history.☆263Dec 8, 2021Updated 4 years ago
- Find subdomains on GitLab.☆106Apr 28, 2024Updated 2 years ago
- Analyze Content-Security-Policy header of a given URL.☆34Jan 10, 2024Updated 2 years ago
- ☆15Apr 7, 2022Updated 4 years ago
- ☆93Sep 18, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Detects request smuggling via HTTP/2 downgrades.☆93Jul 30, 2022Updated 4 years ago
- TProx is a fast reverse proxy path traversal detector and directory bruteforcer.☆30Sep 16, 2021Updated 5 years ago
- Client-Side Prototype Pollution Tools☆90Sep 21, 2021Updated 5 years ago
- A simple script that pushes a file to the Android device and hooks the relevant functions with Frida to override the application's behavi…☆15Oct 9, 2024Updated 2 years ago
- Automated Web Recon Shell Scripts☆53Dec 6, 2021Updated 4 years ago
- huntr.dev public disclosures/hacktivity watcher☆17Nov 5, 2023Updated 2 years ago
- ☆143Nov 9, 2024Updated last year
- This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.☆36May 14, 2022Updated 4 years ago
- gup aka Get All Urls parameters to create wordlists for brute forcing parameters.☆18Dec 4, 2021Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A Security Tool for Enumerating WebSockets☆383Jan 10, 2022Updated 4 years ago
- Simple tools to handle string and generate subdomain permutations☆15Jun 8, 2022Updated 4 years ago
- A tool to perform permutations, mutations and alteration of subdomains in golang.☆160Sep 7, 2026Updated last month
- Piper Burp Suite Extender plugin☆129Jan 14, 2026Updated 9 months ago
- Query various sources for CVE proof-of-concepts☆50Jun 1, 2023Updated 3 years ago
- Unofficial documentation for the great tool Param Miner☆186Aug 21, 2022Updated 4 years ago
- Never forget where you inject.☆306Aug 15, 2025Updated last year
- A tool to test working urls.☆42Nov 17, 2020Updated 5 years ago
- Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)☆302Sep 26, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆362Jul 17, 2023Updated 3 years ago
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆182Oct 26, 2024Updated 2 years ago
- User-Agent , X-Forwarded-For and Referer SQLI Fuzzer☆388May 19, 2023Updated 3 years ago
- WordPress Plugin Update Confusion☆67Dec 7, 2021Updated 4 years ago
- Hidden input parameters finder☆18Jul 10, 2023Updated 3 years ago
- client-side prototype pullution vulnerability scanner☆46Aug 23, 2021Updated 5 years ago
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations☆426Dec 24, 2022Updated 3 years ago