🌩Using CodeQL To Conduct JavaScript Security Analysis Against Modern Web Applications
☆20Oct 16, 2024Updated last year
Alternatives and similar repositories for webql
Users that are interested in webql are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- AI Substitutor is an extension for Burp Suite that uses AI functionality to substitute values of HTTP request parameters and headers.☆29Apr 30, 2025Updated last year
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆39May 5, 2024Updated 2 years ago
- Extract endpoints from specific Git repository for fuzzing☆23Nov 3, 2020Updated 5 years ago
- A Chrome extension that automatically scans web pages and internal links for user-defined keywords, storing results and sending notificat…☆26Sep 28, 2025Updated 10 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Tool to query the RIPE database☆11Jun 2, 2025Updated last year
- Advanced test for proxy & waf☆14Feb 10, 2026Updated 6 months ago
- Ultimate List Of Bug Bounty Tools☆10Feb 25, 2023Updated 3 years ago
- A utility to fetch and display dns names from the SSL/TLS cert data☆15Aug 11, 2023Updated 2 years ago
- Tool to check the CloudTrail configuration and the services where trails are sent, to detect potential attacks to CloudTrail logging.☆13May 25, 2024Updated 2 years ago
- ☆26May 22, 2021Updated 5 years ago
- ☆27Dec 20, 2021Updated 4 years ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆16Mar 10, 2025Updated last year
- .NET deserialization hunter☆91Jul 21, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆16Oct 14, 2022Updated 3 years ago
- Very loud vBulletin exploit☆14Aug 12, 2020Updated 5 years ago
- ☆16Mar 3, 2021Updated 5 years ago
- ☆16Jun 26, 2025Updated last year
- Burp suite extension to find sensitive information by checking incoming text OR binary websocket messages☆59Jul 17, 2026Updated 3 weeks ago
- Reads in a list of domains or subdomains and crawls them for references to S3 buckets☆10Nov 21, 2023Updated 2 years ago
- Fast, compact and all-around subdomain enumeration tool written in Rust☆23Feb 14, 2022Updated 4 years ago
- PoC for CVE-2021-4034 dubbed pwnkit☆35Jan 26, 2022Updated 4 years ago
- Fuzz 403/401ing endpoints for bypasses☆12Aug 14, 2020Updated 5 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Automated assessment of 51 CIS 365 Foundations v3.0.0 benchmark safeguards.☆13Apr 21, 2025Updated last year
- Grepable cheat sheets for pentesting. Each sheet one tool.☆11Oct 15, 2020Updated 5 years ago
- A slick, modern, privacy-focused web interface for viewing and analyzing Nuclei scan results. Built for pentesters & bug hunters who want…☆30Mar 31, 2025Updated last year
- File Upload checklist For Penetration test and RedTeam☆18Nov 16, 2025Updated 8 months ago
- ☆15Jul 23, 2024Updated 2 years ago
- Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀☆134Jul 30, 2025Updated last year
- Get some useful data from Clouds for your targets☆20Updated this week
- Useful scripts for tampermonkey that I used during bug hunting. Will be updated "au fil de l'eau"☆18Jun 2, 2025Updated last year
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- An Automated Framework for End-to-End Blind XSS Detection and Reporting☆17Jan 23, 2026Updated 6 months ago
- A simple script to detect unescaped characters in a web application for e.g. Cross Site Scripting (XSS) attacks.☆10Aug 20, 2020Updated 5 years ago
- ☆19Jun 28, 2023Updated 3 years ago
- Black box fuzzer for web applications☆441Jul 20, 2025Updated last year
- Python 3 alternative command line interface for AWS Route 53; enables simple record management and dynamic DNS☆11Jul 11, 2026Updated last month
- MITM Proxy Script to intercept the aiserver requests from Cursor☆16Apr 16, 2025Updated last year
- Want .uf2 files for your switch hacking needs? ask and link to the .bin payload you want, and I may get to it in my free time. I understa…☆18Feb 4, 2021Updated 5 years ago