TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite
☆99Aug 24, 2026Updated 2 months ago
Alternatives and similar repositories for TokenTwin-Checker
Users that are interested in TokenTwin-Checker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆40Jun 18, 2026Updated 4 months ago
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 4 months ago
- AES-256-CBC shellcode encryption tool.☆21Jan 12, 2026Updated 10 months ago
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆63Jul 12, 2026Updated 4 months ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆51Aug 17, 2026Updated 2 months ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated 3 weeks ago
- A bunch of payloads for my own usage☆15Oct 1, 2026Updated last month
- A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating…☆33Sep 4, 2026Updated 2 months ago
- find sources and sinks from js files☆17Apr 4, 2026Updated 7 months ago
- ☆50Feb 27, 2026Updated 8 months ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 4 months ago
- ☆205Jan 22, 2026Updated 9 months ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)☆467Oct 3, 2026Updated last month
- Open-source passive reconnaissance and exposure discovery tool that leverages VirusTotal and the Wayback Machine to uncover subdomains, U…☆147Sep 20, 2026Updated last month
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆464Apr 30, 2026Updated 6 months ago
- Fully local vulnerability research pipeline - 14B code-specialized LLM reviews every source file exhaustively.☆174Sep 5, 2026Updated 2 months ago
- Some scripts to enumerate and attack Jenkins servers☆12Feb 1, 2024Updated 2 years ago
- Bug Bounty Methodology☆339Oct 5, 2026Updated last month
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆49Aug 1, 2026Updated 3 months ago
- ☆89May 26, 2026Updated 5 months ago
- Self-hosted bug-bounty platform — verification-first recon & DAST, continuous monitoring. Your data stays on your machine.☆134Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆59Jul 24, 2026Updated 3 months ago
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆37May 28, 2026Updated 5 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆30Jun 16, 2026Updated 4 months ago
- ☆31Sep 9, 2025Updated last year
- ☆16Jun 28, 2026Updated 4 months ago
- A smart fuzzing and parameter injection tool designed to discover reflections and identify potential XSS attack vectors.☆40Updated this week
- Autonomous AI pentesting daemon — 34 security tools, 15 vuln classes, WAF bypass engine, LLM analysis. Free tier models (<$3/mo). HackerO…☆84Aug 7, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Stealth hybrid URL mapper☆60Oct 21, 2026Updated 3 weeks ago
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆49Mar 16, 2026Updated 7 months ago
- Unveil new endpoints. Discover new features.☆17Oct 24, 2026Updated 2 weeks ago
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,587Oct 21, 2026Updated 3 weeks ago
- Lightweight reflection scanner☆20Aug 31, 2025Updated last year
- ♥☆227Sep 7, 2025Updated last year
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 3 months ago
Are these results useful?