🔍A cutting edge context aware GraphQL API fuzzing tool!
☆169Jul 18, 2026Updated this week
Alternatives and similar repositories for GraphQLer
Users that are interested in GraphQLer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…☆31Nov 30, 2025Updated 7 months ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated last year
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆162Mar 31, 2025Updated last year
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆228May 22, 2023Updated 3 years ago
- Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!☆21Aug 25, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆18Jul 30, 2024Updated last year
- When good OAuth apps go rogue. Documents observed OAuth application tradecraft☆87Apr 7, 2026Updated 3 months ago
- Chrome extension for automating CSPT discovery☆157May 12, 2026Updated 2 months ago
- Command line interface for Jsmon Security Platform☆33Jul 10, 2026Updated last week
- Looks for parameters in urls☆35Oct 14, 2024Updated last year
- GQLSpection - parses GraphQL introspection schema and generates possible queries☆107Mar 6, 2025Updated last year
- SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens☆169Nov 29, 2024Updated last year
- ☆23Sep 20, 2024Updated last year
- Simple grammar-based test case generator☆45Jul 13, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Burp Suite extension that offers a toolkit for testing GraphQL endpoints.☆204Aug 5, 2024Updated last year
- Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/o…☆906Updated this week
- ☆30Jul 14, 2023Updated 3 years ago
- Blazing fast GraphQL discovery & fingerprinting toolbox.☆134Nov 21, 2023Updated 2 years ago
- jxscout superpowers JavaScript analysis for security researchers☆471Apr 12, 2026Updated 3 months ago
- ☆92Apr 29, 2024Updated 2 years ago
- Java archive implant toolkit.☆62Apr 20, 2025Updated last year
- GitHub Workflows Insights☆47Jun 27, 2026Updated 3 weeks ago
- ☆11Jun 8, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Burp Suite extension to encode an IP address focused to bypass application IP / domain blacklist.☆48Mar 4, 2024Updated 2 years ago
- A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes☆43Nov 28, 2025Updated 7 months ago
- Mutation-guided mutation-based fuzz testing☆53Jul 13, 2024Updated 2 years ago
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆865Jul 9, 2026Updated last week
- FuzzBuilderEx is a system to build seed corpus and fuzzing executables using the test framework automatically.☆14Sep 6, 2022Updated 3 years ago
- ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.☆116Jan 4, 2024Updated 2 years ago
- ☆193Apr 16, 2025Updated last year
- A research project to add some brrrrrr to Burp☆211Feb 16, 2026Updated 5 months ago
- Modular web-application honeypot platform built using go and gin☆63May 8, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆16Jan 9, 2025Updated last year
- Linux CS bypass technique☆33Feb 4, 2025Updated last year
- CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.☆170Jul 2, 2024Updated 2 years ago
- Generate datasets of cloud audit logs for common attacks☆243Jul 6, 2026Updated 2 weeks ago
- ScrapeAW is a framework that without API scrape IPs across the world using Shodan☆11May 16, 2024Updated 2 years ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,867May 22, 2024Updated 2 years ago
- A tech enumeration toolkit focused on 404 Not found pages.☆29Oct 6, 2024Updated last year