Alternatives and similar repositories for bfac:

Users that are interested in bfac are comparing it to the libraries listed below

• antichown / subdomain-takeover
  Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
  ☆361Updated last year
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆534Updated 4 years ago
• Ice3man543 / SubOver
  A Powerful Subdomain Takeover Tool
  ☆950Updated last year
• jcesarstef / dotdotslash
  Search for Directory Traversal Vulnerabilities
  ☆440Updated 10 months ago
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆611Updated 6 months ago
• kurobeats / fimap
  fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion b…
  ☆543Updated 2 years ago
• mazen160 / server-status_PWN
  A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-s…
  ☆436Updated 3 years ago
• PortSwigger / backslash-powered-scanner
  Finds unknown classes of injection vulnerabilities
  ☆679Updated last week
• TypeError / domained
  Multi Tool Subdomain Enumeration
  ☆726Updated 4 years ago
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆531Updated 6 years ago
• appsecco / bugcrowd-levelup-subdomain-enumeration
  This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtu…
  ☆634Updated 6 years ago
• jobertabma / virtual-host-discovery
  A script to enumerate virtual hosts on a server.
  ☆689Updated 7 years ago
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆746Updated 4 years ago
• xsscx / Commodity-Injection-Signatures
  Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
  ☆400Updated 2 weeks ago
• mandatoryprogrammer / xsshunter_client
  Correlated injection proxy tool for XSS Hunter
  ☆254Updated 2 years ago
• codingo / VHostScan
  A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, al…
  ☆1,232Updated last year
• LewisArdern / bXSS
  bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
  ☆534Updated 2 years ago
• appsecco / the-art-of-subdomain-enumeration
  This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  ☆646Updated 6 years ago
• bugbountyforum / XSS-Radar
  ☆326Updated 7 years ago
• fransr / bountyplz
  Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
  ☆453Updated 5 years ago
• nahamsec / JSParser
  ☆810Updated last year
• nahamsec / HostileSubBruteforcer
  ☆467Updated 4 years ago
• vysecurity / DomLink
  A tool to link a domain with registered organisation names and emails, to other domains.
  ☆842Updated 11 months ago
• anshumanbh / tko-subs
  A tool that can help detect and takeover subdomains with dead DNS records
  ☆759Updated 4 years ago
• pentester-io / commonspeak
  Content discovery wordlists generated using BigQuery
  ☆567Updated 5 years ago
• s0md3v / JShell
  JShell - Get a JavaScript shell with XSS.
  ☆523Updated 6 years ago
• JohnTroony / Blisqy
  Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).
  ☆386Updated 6 years ago
• BuffaloWill / oxml_xxe
  A tool for embedding XXE/XML exploits into different filetypes
  ☆1,076Updated 4 months ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• nettitude / xss_payloads
  Exploitation for XSS
  ☆714Updated 3 years ago