omar2535 / GraphQLerLinks
🔍A cutting edge context aware GraphQL API fuzzing tool!
☆147Updated this week
Alternatives and similar repositories for GraphQLer
Users that are interested in GraphQLer are comparing it to the libraries listed below
Sorting:
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…☆163Updated this week
- CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).☆135Updated 4 months ago
- FrogPost: postMessage Security Testing Tool☆95Updated 3 months ago
- ☆82Updated 3 weeks ago
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆134Updated 4 months ago
- tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such …☆233Updated 6 months ago
- Burp Suite extension for testing Passkey systems.☆73Updated 4 months ago
- 🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️☆221Updated 2 years ago
- A research project to add some brrrrrr to Burp☆185Updated 6 months ago
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆220Updated 2 months ago
- boostsecurityio/lotp☆132Updated 4 months ago
- A collection of Turbo Intruder scripts.☆63Updated 6 months ago
- A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representati…☆91Updated 2 years ago
- Manager of third-party sources of Semgrep rules 🗂☆87Updated last year
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆274Updated 5 months ago
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆119Updated 2 years ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆42Updated last year
- Nuclei plugins to audit Chrome extensions☆65Updated last year
- QRFuzz, a fuzzing toolkit to test malicious QR Codes in mobile applications☆46Updated last year
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆105Updated 6 months ago
- A web CTF for training developers in bug hunting and secure coding!☆99Updated 7 months ago
- ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.☆116Updated last year
- Simple PoC for demonstrating Race Conditions on Websockets☆55Updated last year
- ☆96Updated 3 months ago
- Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty in WebSocket☆80Updated last week
- HTML Universal Identifier☆67Updated 8 months ago
- WebSocket REPL for pentesters☆223Updated last year
- Prototype of Full Agentic Application Security Testing, FAAST = SAST + DAST + LLM agents☆63Updated 3 months ago
- ☠️ Code for the Defcon Workshop☆23Updated last year
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Updated 5 months ago