Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
☆80Jun 1, 2019Updated 7 years ago
Alternatives and similar repositories for ttt-ext
Users that are interested in ttt-ext are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- notorious BIG IP☆15Aug 8, 2019Updated 7 years ago
- Scan and categorize websites for rapid triage☆12Jun 23, 2022Updated 4 years ago
- Scan secrets from Continuous Integration Build Logs☆53Oct 14, 2019Updated 7 years ago
- ☆31Apr 6, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- sub domain wild card filtering tool☆39Apr 18, 2020Updated 6 years ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 5 years ago
- A bash script that fetches and maintains thousands of DNS resolvers☆64Aug 24, 2020Updated 6 years ago
- A Go implementation of dirsearch.☆41Mar 10, 2019Updated 7 years ago
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆74Jan 4, 2021Updated 5 years ago
- ☆126Sep 2, 2019Updated 7 years ago
- Service-Now Article Bruteforcer☆16Jun 5, 2020Updated 6 years ago
- Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.☆48Jul 20, 2022Updated 4 years ago
- Smart ssrf scanner using different methods like parameter brute forcing in post and get...☆273Feb 11, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A simple tool with the power of "Go" to find the hidden Vhosts defined at the server.☆19Jan 3, 2019Updated 7 years ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆122May 12, 2026Updated 5 months ago
- Wraps projectdiscovery's cdncheck library to exclude CDN hosts from input passed over stdin☆45Mar 13, 2023Updated 3 years ago
- websocket-connection-smuggler☆70Jan 22, 2020Updated 6 years ago
- ASN target organization IP range attack surface mapping for reconnaissance, fast and lightweight☆219Apr 10, 2022Updated 4 years ago
- Burp Extension for copying requests safely. It redacts headers like Cookie, Authorization and X-CSRF-Token for now. More support can be a…☆20May 17, 2020Updated 6 years ago
- TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.☆319May 22, 2023Updated 3 years ago
- ☆702Jul 4, 2022Updated 4 years ago
- Google Chrome Extension automates testing fundamental Web Problems via Chrome☆20Mar 18, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Chrome extension that finds DOM based XSS vulnerabilities☆75Jun 3, 2025Updated last year
- Continuous monitoring for JavaScript files☆223Dec 29, 2019Updated 6 years ago
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- Fetch known urls from AlienVault's Open Threat Exchange for given hosts☆63Jul 22, 2019Updated 7 years ago
- A tool to bruteforce nameservers when working with subdomain delegations to AWS.☆58Aug 22, 2019Updated 7 years ago
- Finds Directory Listings or open S3 buckets from a list of URLs☆50Sep 29, 2026Updated last month
- WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropr…☆51Mar 19, 2026Updated 7 months ago
- Simple wrapper for meg that sieves through meg's output for you.☆58Oct 25, 2019Updated 7 years ago
- Trying to make automated recon for bug bounties☆253May 3, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A tool that turns the authoritative nameservers of DNS providers to resolvers and resolves the target domain list. Please think of this a…☆24Sep 19, 2019Updated 7 years ago
- Compiles a list of major CDN and WAF subnets.☆68Updated this week
- Wrapper around LinkFinder to quickly determine whether endpoints have been added/removed to JavaScript files.☆41Dec 27, 2019Updated 6 years ago
- A simple script to detect unescaped characters in a web application for e.g. Cross Site Scripting (XSS) attacks.☆10Aug 20, 2020Updated 6 years ago
- A tool for fetching archived URLs (to be rewritten in Go).☆42Jul 19, 2018Updated 8 years ago
- Extract relative urls from a heap snapshot☆87May 30, 2021Updated 5 years ago
- Python script to give you subsets of the nmap "top-ports". For example, I want the 10th to 100th most common TCP ports. Spits out a comma…☆18Mar 8, 2020Updated 6 years ago