omar2535 / GraphQLer
🔍A cutting edge context aware GraphQL API fuzzing tool!
☆126Updated this week
Related projects ⓘ
Alternatives and complementary repositories for GraphQLer
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆84Updated last month
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…☆155Updated last week
- boostsecurityio/lotp☆101Updated 7 months ago
- ☆40Updated last month
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆98Updated 9 months ago
- Nuclei plugins to audit Chrome extensions☆64Updated 4 months ago
- Chrome extension for automating CSPT discovery☆49Updated last month
- Check subdomains for subdomain takeovers and other DNS tomfoolery☆105Updated this week
- Automatically detect potential vulnerabilities and analyze repository metrics to prioritize open source security research targets☆181Updated this week
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆131Updated last year
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆110Updated last year
- Octoscan is a static vulnerability scanner for GitHub action workflows.☆171Updated last week
- A GraphQL enumeration and extraction tool☆128Updated last year
- Simple PoC for demonstrating Race Conditions on Websockets☆56Updated last year
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens☆141Updated last month
- gRPC-Web Pentesting Suite + Burp Suite Extension☆166Updated 4 months ago
- A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representati…☆85Updated last year
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆118Updated 7 months ago
- Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…☆207Updated 2 months ago
- WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find ent…☆117Updated 2 years ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆196Updated last month
- Tools to assess DNS security.☆148Updated 8 months ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- swagroutes is a command-line tool that extracts and lists API routes from Swagger files in YAML or JSON format.☆54Updated last year
- ☆115Updated last year
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆253Updated last week
- GitHub Attack Toolkit - Extreme Edition☆196Updated this week
- Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scena…☆138Updated 2 months ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆39Updated 11 months ago
- Manager of third-party sources of Semgrep rules 🗂☆76Updated 4 months ago