A Burp Suite extension which performs checks for cross-domain scripting against the DOM, subresource integrity checks, and evaluates JavaScript resources against threat intelligence data.
☆27Mar 23, 2022Updated 4 years ago
Alternatives and similar repositories for burp-javascript-security-extension
Users that are interested in burp-javascript-security-extension are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a Burp extension for adding additional payloads to active scanner that require out-of-band validation. Works great with XSSHunter☆20Feb 16, 2017Updated 9 years ago
- ☆16Oct 24, 2018Updated 7 years ago
- Spiders given URLs for input fields.☆18Jul 8, 2017Updated 9 years ago
- Magento Security Scanner☆13Jan 10, 2022Updated 4 years ago
- Subdomain Enumeration and Scanner☆37Jun 8, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A security-first linter for code that shouldn't need linting☆19Sep 12, 2023Updated 2 years ago
- gathers the XSS cheatsheet payloads and creates a usable wordlist☆74Jan 4, 2021Updated 5 years ago
- The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch☆115Oct 27, 2020Updated 5 years ago
- This is my path to OSCP☆11Jun 16, 2018Updated 8 years ago
- Ruby On Rails unrestricted render() exploit☆16Feb 9, 2018Updated 8 years ago
- Automatically extracts API Keys from APK files☆14Feb 1, 2022Updated 4 years ago
- View screenshots as a slideshow over http☆15Mar 13, 2020Updated 6 years ago
- Burp Scanner extension to fingerprint and actively scan instances of the Adobe Experience Manager CMS. It checks the website for common m…☆76Mar 22, 2024Updated 2 years ago
- Burp Bounty profiles☆80Jan 2, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Script to help enumerate and dig through Github and Github Enterprise installations.☆15Nov 30, 2018Updated 7 years ago
- ☆11Mar 9, 2016Updated 10 years ago
- Scan secrets from Continuous Integration Build Logs☆53Oct 14, 2019Updated 6 years ago
- Broken Link Hijacking Burp Extension☆59Sep 13, 2019Updated 6 years ago
- A Burp Extension that makes it easier to view all script code on a Response.☆18Nov 12, 2023Updated 2 years ago
- ☆15Nov 27, 2017Updated 8 years ago
- BurpSuite extension to inject custom cross-site scripting payloads on every form/request submitted to detect blind XSS vulnerabilities☆124May 12, 2026Updated 2 months ago
- Burp Suite extension for parsing Swagger web service definition files☆20Jul 15, 2025Updated last year
- dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-facto…☆43Apr 23, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Pickaxe is a fast and customizable security scan library which simplifies security testing for web applications like Adobe Experience Man…☆15Dec 5, 2023Updated 2 years ago
- Burp plugin to do random fuzzing of HTTP requests☆33Jan 31, 2017Updated 9 years ago
- Scanner de vulnerabilidades Web.☆15Sep 6, 2015Updated 10 years ago
- extracts urls from text☆16Jul 13, 2018Updated 8 years ago
- A scripted library of hacking techniques.☆18Jul 18, 2018Updated 8 years ago
- This repository contains hit lists to use for web application content discovery.☆11May 31, 2017Updated 9 years ago
- Messy BurpSuite plugin for SQL Truncation vulnerabilities.☆64Apr 17, 2020Updated 6 years ago
- Deeplack is a python script designed for comparing images (screenshots) using DeepAI to detect changes on websites.☆14Jun 19, 2019Updated 7 years ago
- Disable root checks performed by rootbeer library (for security testing)☆25Oct 20, 2017Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Wordlist for content(directory) bruteforce discovering with Burp or dirsearch☆218Oct 12, 2024Updated last year
- Credentials Checking Framework☆53Feb 8, 2023Updated 3 years ago
- RFD Checker - security CLI tool to test Reflected File Download issues☆63Feb 26, 2019Updated 7 years ago
- WebDigger is a python based tool, specially created to get a company's unknown domain for pentestor.☆17Aug 6, 2016Updated 10 years ago
- A Burp Suite Professional extension for decrypting/decoding various types of cookies.☆12Jun 12, 2019Updated 7 years ago
- Python script to decrypt files encrypted using Cordova in Android app☆15Aug 19, 2018Updated 7 years ago
- Fuzzing for LFI using Burpsuite☆69Oct 4, 2016Updated 9 years ago