r0oth3x49 / ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
β3,396Updated this week
Alternatives and similar repositories for ghauri:
Users that are interested in ghauri are comparing it to the libraries listed below
- ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.β3,963Updated this week
- A simple script just made for self use for bypassing 403β1,827Updated 9 months ago
- Quickly discover exposed hosts on the internet using multiple search engines.β2,529Updated 3 weeks ago
- Rockyou for web fuzzingβ2,718Updated this week
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Reβ¦β1,456Updated last month
- An OOB interaction gathering server and client libraryβ3,619Updated this week
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probingβ2,634Updated 8 months ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)β1,412Updated 2 years ago
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entβ¦β1,822Updated 3 months ago
- dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.β2,279Updated this week
- Tool to bypass 403/40X response codes.β1,181Updated 2 months ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.β4,196Updated 2 months ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScriptβ1,492Updated 9 months ago
- Automatic SSTI detection tool with interactive interfaceβ991Updated 4 months ago
- A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attβ¦β4,993Updated this week
- An XSS exploitation command-line interface and payload generator.β1,308Updated last month
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript filesβ2,101Updated 9 months ago
- A fast tool to scan CRLF vulnerability written in Goβ1,393Updated last week
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlistβ1,307Updated this week
- Automatic SSRF fuzzer and exploitation toolβ3,093Updated this week
- Burp Plugin to Bypass WAFs through the insertion of Junk Dataβ1,026Updated last month
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!β1,919Updated last month
- Check your WAF before an attacker doesβ1,340Updated last month
- Real-world infosec wordlists, updated regularlyβ1,451Updated this week
- Top disclosed reports from HackerOneβ4,284Updated 3 weeks ago
- An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!β1,753Updated 11 months ago
- Hidden parameters discovery suiteβ1,786Updated 5 months ago
- 40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...β1,681Updated last year
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitterβ2,844Updated last year
- Nuclei Templates Collectionβ951Updated 9 months ago