Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)
☆12Sep 9, 2026Updated last month
Alternatives and similar repositories for alettagap
Users that are interested in alettagap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆16Jun 14, 2026Updated 4 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- WAF Bypass Payload List☆18Jan 10, 2026Updated 9 months ago
- Caido plugin for jxscout☆17Jul 7, 2026Updated 3 months ago
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆97Sep 10, 2026Updated last month
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Nuclei-like credential surface scanner with BloodHound support. Audits local hosts for exposed secrets, cloud tokens, DevOps, and AI keys…☆85Jul 21, 2026Updated 3 months ago
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆43Sep 22, 2026Updated last month
- Chrome MV3 extension that auto-discovers JS endpoints and parameter keys from code and network traffic☆13Aug 19, 2025Updated last year
- ☆74Jul 15, 2026Updated 3 months ago
- A tool to manipulate parameters inside URLs with different modes in order to check for reflected parameters.☆10Sep 2, 2023Updated 3 years ago
- ☆16Jun 28, 2026Updated 3 months ago
- ☆56Oct 14, 2026Updated last week
- Faster passive subdomain enumeration tool.☆259Oct 12, 2026Updated last week
- Stealth hybrid URL mapper☆56Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- Nuclei templates to run on urls☆18Sep 14, 2023Updated 3 years ago
- ☆12Jun 5, 2026Updated 4 months ago
- ☆13Jun 18, 2022Updated 4 years ago
- XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnera…☆39Oct 15, 2026Updated last week
- A fast web crawler for gathering URLs, JavaScript files, and hidden parameters.☆41May 28, 2026Updated 4 months ago
- Free MIT AI coding agent — no API key needed. Built-in free model, or bring Claude, GPT, Gemini, DeepSeek, Ollama +50 more. Swarm mode, 4…☆453Updated this week
- A local, safety-first pre-submission reviewer for bug bounty reports.☆43Oct 3, 2026Updated 3 weeks ago
- find sources and sinks from js files☆17Apr 4, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆15May 25, 2026Updated 5 months ago
- ☆13Mar 6, 2025Updated last year
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆43Apr 12, 2026Updated 6 months ago
- Free BugBounty KrazePlanetTraining☆61Dec 17, 2025Updated 10 months ago
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆16Jun 11, 2026Updated 4 months ago
- The primary goal of this project is to explain SQL Injection (one of the OWASP Top 10 vulnerabilities) and to provide a beneficial resour…☆149Jan 10, 2026Updated 9 months ago
- Burp Suite extension to detect Web Cache Deception vulnerabilities, now compatible with the Community Edition. Automates advanced cache …☆20Jun 11, 2026Updated 4 months ago
- A Python tool to resolve domains to IPs, fetch related CVEs, and display open ports☆17Nov 21, 2025Updated 11 months ago
- 结合四大识别插件优点而集合的专业的全球蜜罐检测工具 - 支持35+种国际蜜罐平台，165+条检测规则。☆81Aug 22, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Structured practice: Mainly PortSwigger lab writeups☆23Updated this week
- The official Rifteo agent skills library - a collection of reusable instruction sets for AI agents covering security testing, audit, and …☆39Sep 16, 2026Updated last month
- vulntechfinder is a powerful security tool that automates vulnerability scanning based on technology stack detection. It intelligently pr…☆20Aug 23, 2026Updated 2 months ago
- ☆13Mar 3, 2023Updated 3 years ago
- 云安全漏洞挖掘与利用 Skill。S3 桶爆破枚举、公开桶敏感文件发现、SSRF→IMDS 凭证窃取探测、K8s 未授权访问检测、容器逃逸条件识别、 AK/SK 凭证验证与权限枚举、存储桶供应链攻击利用。☆33Jul 14, 2026Updated 3 months ago
- ☆52Oct 1, 2025Updated last year
- CTF Writeup including upsolve / Hack The Box Writeup☆21Sep 14, 2026Updated last month