rverton / xssmap
(DOM-)XSS fuzzer based on phantomjs and go.
☆34Updated 10 years ago
Alternatives and similar repositories for xssmap:
Users that are interested in xssmap are comparing it to the libraries listed below
- Burp Commander written in Go☆57Updated 5 years ago
- Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.☆64Updated 5 years ago
- ☆123Updated 5 years ago
- WebBorer is a directory-enumeration tool written in Go.☆44Updated last year
- S3 bucket enumerator☆44Updated 7 years ago
- Execute tasks across SSH hosts using random selection☆17Updated 4 years ago
- extracts urls from text☆16Updated 6 years ago
- Mass scanning the internet (http and https) using a raw tcpstack.☆59Updated 7 years ago
- Simple trick to increase readability of exceptions raised by Burp extensions written in Python☆43Updated 7 years ago
- HackerOne Public Disclosure Slack Bot☆20Updated 2 years ago
- Exploit insecure crossdomain.xml files.☆26Updated 7 years ago
- differer finds how URLs are parsed by different languages in order to help bug hunters break filters☆63Updated 4 years ago
- ☆36Updated 6 years ago
- Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.☆49Updated 2 years ago
- A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418☆35Updated 5 years ago
- Burp Suite JS Beautifier☆98Updated 10 years ago
- A program to map out SPF and DKIM records for a large number of domains☆37Updated 9 years ago
- Damn Small FI Scanner☆60Updated 5 years ago
- A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status☆89Updated 4 years ago
- A tool for fetching archived URLs (to be rewritten in Go).☆39Updated 6 years ago
- Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container☆33Updated 6 years ago
- ☆13Updated 2 years ago
- An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match☆42Updated 12 years ago
- An example of obtaining RCE via Redis and CSRF☆76Updated 8 years ago
- Smart DNS Brute Forcer☆22Updated 12 years ago
- A list of subdomains for some of the most popular sites on the internet☆11Updated 5 years ago
- A simple remote scanner for Sitecore CMS☆12Updated 8 months ago
- Scans a list of websites for Cloudfront or S3 Buckets☆103Updated 2 years ago
- A horizontal and vertical web content enumerator☆51Updated 6 years ago
- the puppy proxy☆22Updated 4 years ago