Alternatives and similar repositories for bfac

Users that are interested in bfac are comparing it to the libraries listed below

• pentester-io / commonspeak
  Content discovery wordlists generated using BigQuery
  ☆576Updated 5 years ago
• jobertabma / relative-url-extractor
  A small tool that extracts relative URLs from a file.
  ☆756Updated 5 years ago
• jobertabma / virtual-host-discovery
  A script to enumerate virtual hosts on a server.
  ☆691Updated 7 years ago
• mazen160 / server-status_PWN
  A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-s…
  ☆438Updated 4 years ago
• antichown / subdomain-takeover
  Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
  ☆365Updated 2 years ago
• TypeError / domained
  Multi Tool Subdomain Enumeration
  ☆723Updated 4 years ago
• assetnote / commonspeak2-wordlists
  Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.
  ☆539Updated 7 years ago
• LewisArdern / bXSS
  bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
  ☆552Updated 2 years ago
• codingo / VHostScan
  A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, al…
  ☆1,258Updated 2 months ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆552Updated 5 years ago
• xsscx / Commodity-Injection-Signatures
  Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
  ☆402Updated 6 months ago
• Ice3man543 / SubOver
  A Powerful Subdomain Takeover Tool
  ☆960Updated 2 years ago
• PortSwigger / backslash-powered-scanner
  Finds unknown classes of injection vulnerabilities
  ☆703Updated 5 months ago
• appsecco / the-art-of-subdomain-enumeration
  This repository contains all the supplement material for the book "The art of sub-domain enumeration"
  ☆657Updated 6 years ago
• appsecco / bugcrowd-levelup-subdomain-enumeration
  This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtu…
  ☆633Updated 6 years ago
• jcesarstef / dotdotslash
  Search for Directory Traversal Vulnerabilities
  ☆455Updated 3 months ago
• cujanovic / Open-Redirect-Payloads
  Open Redirect Payloads
  ☆638Updated last year
• kurobeats / fimap
  fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion b…
  ☆565Updated 3 years ago
• anantshri / svn-extractor
  simple script to extract all web resources by means of .SVN folder exposed over network.
  ☆475Updated last year
• fransr / bountyplz
  Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)
  ☆460Updated 6 years ago
• vysecurity / DomLink
  A tool to link a domain with registered organisation names and emails, to other domains.
  ☆845Updated last year
• milo2012 / pathbrute
  Pathbrute
  ☆455Updated 5 years ago
• nahamsec / HostileSubBruteforcer
  ☆475Updated 4 years ago
• nettitude / xss_payloads
  Exploitation for XSS
  ☆724Updated 4 years ago
• nahamsec / JSParser
  ☆829Updated last year
• mandatoryprogrammer / xsshunter_client
  Correlated injection proxy tool for XSS Hunter
  ☆257Updated 2 years ago
• blark / aiodnsbrute
  Python 3.5+ DNS asynchronous brute force utility
  ☆663Updated 2 years ago
• TheHackerDev / race-the-web
  Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.
  ☆623Updated 3 years ago
• capt-meelo / LazyRecon
  An automated approach to performing recon for bug bounty hunting and penetration testing.
  ☆454Updated 5 years ago
• PortSwigger / upload-scanner
  HTTP file upload scanner for Burp Proxy
  ☆415Updated 2 years ago