Prototype pollution scanner using headless chrome
☆218Jul 27, 2022Updated 3 years ago
Alternatives and similar repositories for plution
Users that are interested in plution are comparing it to the libraries listed below
Sorting:
- Client Side Prototype Pollution Scanner☆523Sep 17, 2022Updated 3 years ago
- ☆562Mar 27, 2025Updated 11 months ago
- Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…☆1,153Jan 21, 2026Updated last month
- BugBounty , sort and delete duplicates param value without missing original value☆22Jul 31, 2021Updated 4 years ago
- A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.☆518Jun 22, 2022Updated 3 years ago
- Nuclei Templates - Here you will find the templates I use while hunting☆120Sep 27, 2021Updated 4 years ago
- Hidden parameters discovery suite☆2,027Sep 8, 2024Updated last year
- ☆756Jun 26, 2024Updated last year
- A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀☆659Aug 28, 2025Updated 6 months ago
- ☆96Oct 1, 2021Updated 4 years ago
- Go scripts for checking API key / access token validity☆221Aug 3, 2021Updated 4 years ago
- A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.☆109Mar 1, 2022Updated 4 years ago
- Finding XSS during recon☆273Sep 13, 2022Updated 3 years ago
- NodeJS script to extract assets for the Apple bug bounty program from their security acknowledgments page for bug bounty recon.☆78Nov 5, 2022Updated 3 years ago
- A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.☆184Nov 22, 2021Updated 4 years ago
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations☆406Dec 24, 2022Updated 3 years ago
- This extension replaces the default repeater tab name with the URL path of the repeater request.☆24Sep 3, 2021Updated 4 years ago
- Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load☆297Sep 22, 2024Updated last year
- Scanner for Cross-Site WebSocket Hijacking☆41Feb 19, 2026Updated last week
- ☆299Jul 16, 2022Updated 3 years ago
- Prototype Pollution Scanner☆139Apr 11, 2021Updated 4 years ago
- tool that generates bypasses for open redirects☆51Apr 18, 2022Updated 3 years ago
- A simple tool which makes creating nuclei templates even easier.☆36Jun 23, 2024Updated last year
- Automation for javascript recon in bug bounty.☆1,069Sep 9, 2023Updated 2 years ago
- ☆436Jun 1, 2021Updated 4 years ago
- ☆148Dec 23, 2022Updated 3 years ago
- Bugbounty scope tool☆332Mar 5, 2025Updated 11 months ago
- Prototype Pollution and useful Script Gadgets☆1,584Jan 27, 2024Updated 2 years ago
- Takeover subdomains using AWS dangling elastic ips and have a working POC for Subdomain Takeover.☆93Jul 9, 2025Updated 7 months ago
- Smart ssrf scanner using different methods like parameter brute forcing in post and get...☆279Feb 11, 2021Updated 5 years ago
- An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects☆970Dec 8, 2021Updated 4 years ago
- ☆13Jul 12, 2021Updated 4 years ago
- Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.☆559Mar 8, 2025Updated 11 months ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,039Aug 23, 2025Updated 6 months ago
- 🔭 Collection of regexp pattern for security passive scanning☆116Feb 18, 2023Updated 3 years ago
- Match and Replace script used to automatically generate JSON option file to BurpSuite☆215May 13, 2019Updated 6 years ago
- Astra is a tool to find URLs and secrets inside a webpage/files☆212Mar 14, 2023Updated 2 years ago
- a Go code to detect leaks in JS files via regex patterns☆150Oct 20, 2021Updated 4 years ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆778Aug 19, 2024Updated last year