Alternatives and similar repositories for CrackQL:

Users that are interested in CrackQL are comparing it to the libraries listed below

• dolevf / graphw00f
  graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology…
  ☆611Updated 3 months ago
• nicholasaleks / graphql-threat-matrix
  GraphQL threat framework used by security professionals to research security gaps in GraphQL implementations
  ☆302Updated last year
• assetnote / surf
  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …
  ☆626Updated last year
• musana / mx-takeover
  mx-takeover focuses DNS MX records and detects misconfigured MX records.
  ☆346Updated last year
• Escape-Technologies / graphql-wordlist
  The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
  ☆356Updated last year
• gsmith257-cyber / GraphCrawler
  GraphQL automated security testing toolkit
  ☆313Updated last year
• PalindromeLabs / STEWS
  A Security Tool for Enumerating WebSockets
  ☆343Updated 3 years ago
• dolevf / graphql-cop
  Security Auditor Utility for GraphQL APIs
  ☆436Updated last month
• Th0h0 / autossrf
  Smart context-based SSRF vulnerability scanner.
  ☆349Updated 2 years ago
• forcesunseen / graphquail
  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.
  ☆191Updated 7 months ago
• optiv / mobile-nuclei-templates
  ☆402Updated 3 years ago
• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆258Updated last week
• kleiton0x00 / ppmap
  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
  ☆503Updated 2 years ago
• PalindromeLabs / awesome-websocket-security
  Awesome information for WebSockets security research
  ☆261Updated 3 years ago
• Josue87 / gotator
  Gotator is a tool to generate DNS wordlists through permutations.
  ☆466Updated 2 years ago
• cramppet / regulator
  Automated learning of regexes for DNS discovery
  ☆364Updated 2 years ago
• daffainfo / all-about-apikey
  Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)
  ☆271Updated last year
• trufflesecurity / xsshunter
  ☆427Updated 2 months ago
• projectdiscovery / fuzzing-templates
  Community curated list of nuclei templates for finding "unknown" security vulnerabilities.
  ☆63Updated 10 months ago
• anshumanpattnaik / http-request-smuggling
  HTTP Request Smuggling Detection Tool
  ☆491Updated last year
• projectdiscovery / interactsh-web
  Web dashboard for Interactsh client
  ☆207Updated this week
• lauritzh / domscan
  Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.
  ☆236Updated last month
• hisxo / JSpector
  A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues
  ☆353Updated last year
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆546Updated last year
• edoardottt / missing-cve-nuclei-templates
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration test…
  ☆367Updated this week
• hakluke / bug-bounty-standards
  A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way t…
  ☆229Updated 3 years ago
• trickest / mkpath
  Make URL path combinations using a wordlist
  ☆173Updated last year
• mdsecresearch / BurpSuiteSharpener
  ☆518Updated last year
• Brum3ns / firefly
  Black box fuzzer for web applications
  ☆425Updated 8 months ago
• hakluke / hakip2host
  hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.
  ☆439Updated 2 years ago