TokenTwin Checker — Dual Token BAC/IDOR Tester for Burp Suite
☆98Aug 24, 2026Updated last month
Alternatives and similar repositories for TokenTwin-Checker
Users that are interested in TokenTwin-Checker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆40Jun 18, 2026Updated 4 months ago
- AES-256-CBC shellcode encryption tool.☆21Jan 12, 2026Updated 9 months ago
- A practical security workbook for reviewing source code, identifying vulnerabilities, validating findings with test cases, and automating…☆32Sep 4, 2026Updated last month
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Oct 16, 2026Updated last week
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆61Jul 12, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- find sources and sinks from js files☆17Apr 4, 2026Updated 6 months ago
- A simple recon pipeline☆39Sep 24, 2026Updated 3 weeks ago
- Pentest Coverage Tracker is a Burp Suite extension that helps penetration testers monitor testing coverage in real time. It logs discover…☆47Mar 16, 2026Updated 7 months ago
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories …☆104Oct 13, 2026Updated last week
- Automated DAST for Android Apps☆156Sep 16, 2026Updated last month
- ☆34Jun 18, 2026Updated 4 months ago
- ☆50Aug 17, 2026Updated 2 months ago
- A proof-of-concept PDF file designed for authorized security testing of PDF upload functionality and PDF viewer behavior, including XSS a…☆77Aug 28, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Personal Web Application Pentesting Methodology built during my cybersecurity learning journey. Covers reconnaissance, scanning, fuzzing,…☆59Jul 24, 2026Updated 2 months ago
- High-assurance, artifact-agnostic prompt for authorized security labs, exploit-chain research, PoC validation, and evidence-led reporting…☆45Aug 1, 2026Updated 2 months ago
- ☆204Jan 22, 2026Updated 9 months ago
- Stealth hybrid URL mapper☆52Updated this week
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 3 months ago
- ☆49Feb 27, 2026Updated 7 months ago
- Open-source passive reconnaissance and exposure discovery tool that leverages VirusTotal and the Wayback Machine to uncover subdomains, U…☆146Sep 20, 2026Updated last month
- The one shot API attacker tool - finds the API url from the given root simulate the automated attacks☆35Jul 21, 2026Updated 3 months ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Bug Bounty Methodology☆335Oct 5, 2026Updated 2 weeks ago
- Some scripts to enumerate and attack Jenkins servers☆12Feb 1, 2024Updated 2 years ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- ☆27Mar 30, 2026Updated 6 months ago
- AI-powered vulnerability scanner extension for Burp Suite with multi-provider support (Ollama, OpenAI, Claude, Gemini)☆466Oct 3, 2026Updated 2 weeks ago
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆35Jul 24, 2026Updated 2 months ago
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- all round pentest skill☆458Sep 16, 2026Updated last month
- AI-Powered Agents for Bub-Bounty Pentesting and Red-Teaming purposes☆452Apr 30, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Burp Suite extension to find hardcoded secrets & hidden endpoints in JavaScript. 150+ detection patterns, active JS fetch, low-noise fals…☆97Sep 10, 2026Updated last month
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆35May 28, 2026Updated 4 months ago
- ☆31Sep 9, 2025Updated last year
- ♥☆224Sep 7, 2025Updated last year
- Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, passive and active scanning and more☆1,553Updated this week
- RepShot · Generate professional security finding cards directly from Burp Suite Repeater.☆109May 31, 2026Updated 4 months ago
- Replay any request as another user to find IDOR/BOLA/BFLA, right in the browser.☆29Jun 16, 2026Updated 4 months ago