The Serverless Blind XSS App
☆339Mar 28, 2026Updated 6 months ago
Alternatives and similar repositories for xless
Users that are interested in xless are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.☆300Feb 12, 2023Updated 3 years ago
- A blind XSS detection and XSS data capture framework☆177Sep 4, 2026Updated last month
- A tool to find sensitive keys and passwords in Travis logs☆140Jun 27, 2021Updated 5 years ago
- Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…☆1,814Apr 26, 2024Updated 2 years ago
- ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.☆2,349Jul 8, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Dump all available paths and/or endpoints on WADL file.☆96Nov 24, 2025Updated 10 months ago
- Scan secrets from Continuous Integration Build Logs☆53Oct 14, 2019Updated 7 years ago
- Second-order subdomain takeover scanner☆408Mar 29, 2026Updated 6 months ago
- ☆813Jul 28, 2024Updated 2 years ago
- A highly configurable Framework for easy automated web scanning☆383Jul 13, 2020Updated 6 years ago
- Repo of useful scripts☆103Jun 30, 2020Updated 6 years ago
- Fetches javascript file from a list of URLS or subdomains.☆864Jul 22, 2025Updated last year
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- Secret and/or credential patterns used for gf.☆245Feb 10, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,355Aug 7, 2026Updated 2 months ago
- A Firefox Web Extension to improve the discovery of DOM XSS.☆293Nov 13, 2024Updated last year
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep☆1,453Sep 13, 2024Updated 2 years ago
- Automatic tool for DNS rebinding-based SSRF attacks☆308Aug 21, 2020Updated 6 years ago
- ☆441Jun 1, 2021Updated 5 years ago
- DNS Takeover tool written in Go☆2,125Updated this week
- Making Favicon.ico based Recon Great again !☆1,317Aug 29, 2023Updated 3 years ago
- Bugbounty scope tool☆331Mar 5, 2025Updated last year
- Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will m…☆99Dec 30, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed b…☆1,034Feb 5, 2021Updated 5 years ago
- A fuzzer for detecting open redirect vulnerabilities☆806Jul 1, 2024Updated 2 years ago
- Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools☆288Jul 13, 2024Updated 2 years ago
- ☆31Apr 6, 2021Updated 5 years ago
- A natural evolution of Burp Suite's Repeater tool☆202Apr 15, 2026Updated 6 months ago
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆74Jan 4, 2021Updated 5 years ago
- A better version of my xssfinder tool - scans for different types of xss on a list of urls.☆188Aug 3, 2019Updated 7 years ago
- Automated blind-xss search for Burp Suite☆283Oct 10, 2019Updated 7 years ago
- A simple SSRF-testing sheriff written in Go☆343Oct 31, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- XSS payloads designed to turn alert(1) into P1☆1,406Sep 12, 2023Updated 3 years ago
- CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.☆135Sep 25, 2019Updated 7 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- Burp Suite Extension to monitor new scope☆198Mar 31, 2021Updated 5 years ago
- Security Testing Scripts for JWT☆334Mar 13, 2026Updated 7 months ago
- websocket-connection-smuggler☆70Jan 22, 2020Updated 6 years ago
- Subdomain takeover vulnerability checker☆1,603Sep 10, 2024Updated 2 years ago