mastomii / nexssLinks
NeXSS is a modern, self-hosted Blind XSS (Cross-Site Scripting) hunter and callback listener built with Next.js. It helps security researchers and penetration testers discover and validate blind XSS vulnerabilities by capturing detailed information when payloads execute on target systems.
☆20Updated last week
Alternatives and similar repositories for nexss
Users that are interested in nexss are comparing it to the libraries listed below
Sorting:
- Resources for Mobile Application Testing 📓☆72Updated last year
- A tool for inspecting and analyzing mobile application storage files.☆49Updated 7 months ago
- A tool for listing and extracting installed Android APKs and decrypted iOS IPAs (plus app storage) from rooted or jailbroken devices.☆38Updated 8 months ago
- ☆95Updated 9 months ago
- ☆47Updated 10 months ago
- Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdoma…☆53Updated this week
- ☆41Updated last year
- ☆41Updated 2 years ago
- Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques, such as: SPF records and DNS history. By default, Unw…☆98Updated 6 months ago
- Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!☆154Updated 3 months ago
- Cyber Security Awareness Framework (CSAF)☆100Updated last week
- Advanced CORS Header Checker Tool with Vulnerability Detection and Bypass Attempts☆65Updated 7 months ago
- A standalone collection of widely used technologies with default credentials enabled, which can be utilized for establishing an initial f…☆20Updated last year
- Morgan is a powerful tool designed to help security researchers, developers, and security auditors identify sensitive information, vulner…☆56Updated 11 months ago
- A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API☆75Updated 11 months ago
- Google maps api key checker for pentesting purpose☆28Updated 3 years ago
- My Offensive Security OSWA certification experience and my personal opinion what helps in preparation for the exam☆41Updated 2 years ago
- ☆78Updated 7 months ago
- A fast subdomain takeover tool☆85Updated 2 years ago
- An Incredibly Annoying, Insufferable Authentication Implementation☆31Updated last year
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆41Updated last year
- ☆15Updated 3 years ago
- ☆21Updated 9 months ago
- ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.☆113Updated 2 years ago
- SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code…☆48Updated 4 months ago
- AI/LLM local model integration for analysis of reconftw results☆86Updated 8 months ago
- ☆31Updated 8 months ago
- Search for all leaked keys/secrets using one regex! bugbounty☆169Updated 9 months ago
- Zzl is a reconnaissance tool that collects subdomains from SSL certificates in IP ranges☆45Updated last year
- This script automates SQL injection testing using SQLMap with AI-powered decision making.☆29Updated 6 months ago