Alternatives and similar repositories for scope:

Users that are interested in scope are comparing it to the libraries listed below

• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆26Updated 5 months ago
• siamthanathack / Passkey-Raider
  Burp Suite extension for testing Passkey systems.
  ☆65Updated last month
• intrudir / burpcollaborator-docker
  A set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate in as simple a p…
  ☆29Updated 2 months ago
• mrrootsec / AssetViz
  AssetViz simplifies the visualization of subdomains from input files, presenting them as a coherent mind map. Ideal for penetration test…
  ☆32Updated 11 months ago
• NodyHub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆47Updated 6 months ago
• yousseflahouifi / moniorg
  moniorg is a tool that leverages crt.sh website to monitor domains of a target
  ☆47Updated last year
• tenable / hidden-services-revealer
  ☆33Updated 7 months ago
• Anof-cyber / PyCript-WebSocket
  Burp Suite extension for bypassing client-side encryption for pentesting and bug bounty in WebSocket
  ☆73Updated last month
• trickest / elasticsearch_index
  Manage attack surface data on Elasticsearch
  ☆22Updated last year
• BountySecurity / BountyPrompt
  Bounty Prompt is an Open-Source Burp Suite extension by Bounty Security that leverages advanced AI via Burp AI and Groq AI. It enables us…
  ☆83Updated last month
• dsecuredcom / yataf
  yataf extracts secrets and paths from files or urls - its best used against javascript files
  ☆52Updated 6 months ago
• projectdiscovery / tunnelx
  TunnelX is a lightweight ingress tunneling tool designed to create a secure SOCKS5 proxy server for routing network traffic.
  ☆30Updated 2 weeks ago
• dwisiswant0 / ipfuscator
  A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representati…
  ☆86Updated last year
• cosad3s / njsdump
  Dump paths & pages from Next.js Manifest
  ☆14Updated last year
• AndreySokolov247 / XSS-AGENT
  Autonomous AI C2
  ☆30Updated 8 months ago
• geeknik / test-proxy
  Advanced test for proxy & waf
  ☆13Updated 6 months ago
• fyoorer / ffufsee
  Ffuf output browser
  ☆39Updated 2 years ago
• PortSwigger / paramalyzer
  Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests.
  ☆32Updated 2 years ago
• sensepost / steampipe-plugin-projectdiscovery
  A steampipe plugin to query projectdiscovery.io tools.
  ☆26Updated 8 months ago
• c3l3si4n / crtdumper
  crtdumper is a Go application designed to interact directly with Certificate Transparency (CT) logs servers and extract domain names fro…
  ☆26Updated 9 months ago
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆64Updated 8 months ago
• adelapazborrero / slack_jack
  Hijack a slack bot to phish your way in
  ☆55Updated 3 months ago
• Acceis / unisec
  Unicode Security Toolkit
  ☆34Updated 5 months ago
• PortSwigger / nuclei-burp-integration
  Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.
  ☆29Updated last year
• NHAS / egressinator
  Find what egress ports are allowed
  ☆39Updated 2 years ago
• harisec / orange-confusion-attacks
  Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!
  ☆20Updated 7 months ago
• umair9747 / 4oFour
  A tech enumeration toolkit focused on 404 Not found pages.
  ☆24Updated 5 months ago
• nullenc0de / paramhunter
  Looks for parameters in urls
  ☆34Updated 5 months ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆40Updated last year
• KathanP19 / waybackfetch
  Tool for fetching all the available waybackmachine snapshot urls
  ☆20Updated 5 months ago